deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-18135
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18136
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18137
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18138
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18139
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18140
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18141
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18142
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18143
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18144
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18145
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18146
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18147
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18148
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18149
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18150
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18151
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18152
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18153
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18154
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18155
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18156
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18157
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18158
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18159
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18160
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18161
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18162
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18163
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18164
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18165
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18166
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18167
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18168
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18169
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18170
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18171
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18172
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18173
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18174
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18175
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18176
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18177
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18178
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18179
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18180
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18181
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18182
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18183
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18184
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18185
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18186
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18187
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2018-18188
Published: 2023-02-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none.
CVE: CVE-2022-48230
Published: 2023-02-27
Description: There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to DoS.
CVSS Score: 7.5 (HIGH)
CWE: CWE-436, CWE-436
References: https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-moiiahpp-a2a7a816-en; https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-moiiahpp-a2a7a816-en
CVE: CVE-2022-48254
Published: 2023-02-27
Description: There is a data processing error vulnerability in Leia-B29 2.0.0.49(M03). Successful exploitation could bypass lock screen authentication.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-287
References: https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-dpeviahb-44e16f60-en; https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-dpeviahb-44e16f60-en
CVE: CVE-2022-48255
Published: 2023-02-27
Description: There is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325. A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-sciviahpp-f18e962a-en; https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-sciviahpp-f18e962a-en
CVE: CVE-2022-48259
Published: 2023-02-27
Description: There is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could allow attackers to gain higher privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-sciviahpp-4181d272-en; https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-sciviahpp-4181d272-en
CVE: CVE-2022-48260
Published: 2023-02-27
Description: There is a buffer overflow vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to device service exceptions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-boviahpp-7a1783e1-en; https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-boviahpp-7a1783e1-en
CVE: CVE-2022-48261
Published: 2023-02-27
Description: There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation of this vulnerability may cause the printer service to be abnormal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-436, CWE-436
References: https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-moivihp-5deb7c23-en; https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-moivihp-5deb7c23-en
CVE: CVE-2022-48283
Published: 2023-02-27
Description: A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful exploitation of this vulnerability could allow attackers to access restricted functions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269, CWE-269
References: https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-ipavihwhis-1afe7781-en; https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-ipavihwhis-1afe7781-en
CVE: CVE-2022-48284
Published: 2023-02-27
Description: A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful exploitation of this vulnerability could allow attackers to access restricted functions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269, CWE-269
References: https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-ipavihwhis-1556afc2-en; https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-ipavihwhis-1556afc2-en
CVE: CVE-2022-48305
Published: 2023-02-27
Description: There is an identity authentication bypass vulnerability in Huawei Children Smart Watch (Simba-AL00) 1.1.1.274. Successful exploitation of this vulnerability may cause the access control function of specific applications to fail.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-287
References: https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-iabvithcswsa-c385b2dc-en; https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-iabvithcswsa-c385b2dc-en
CVE: CVE-2023-24249
Published: 2023-02-27
Description: An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://flyd.uk/post/cve-2023-24249/; https://github.com/z-song/laravel-admin; https://laravel-admin.org/
CVE: CVE-2023-24253
Published: 2023-02-27
Description: Domotica Labs srl Ikon Server before v2.8.6 was discovered to contain a SQL injection vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.swascan.com/it/security-advisory-domotica-labs-ikon-server/; https://www.swascan.com/it/security-advisory-domotica-labs-ikon-server/
CVE: CVE-2020-9846
Published: 2023-02-27
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to access local users' Apple IDs.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/HT212869; https://support.apple.com/en-us/HT212869
CVE: CVE-2021-46841
Published: 2023-02-27
Description: This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 3.5.0 for Android. An attacker in a privileged network position can track a user's activity.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/HT213472; https://support.apple.com/en-us/HT213472
CVE: CVE-2022-22582
Published: 2023-02-27
Description: A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5, macOS Monterey 12.3. A local user may be able to write arbitrary files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213184; https://support.apple.com/en-us/HT213185
CVE: CVE-2022-22668
Published: 2023-02-27
Description: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. A malicious application may be able to leak sensitive user information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213182
CVE: CVE-2022-26760
Published: 2023-02-27
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 15.5 and iPadOS 15.5. A malicious application may be able to elevate privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213258; https://support.apple.com/en-us/HT213258
CVE: CVE-2022-32784
Published: 2023-02-27
Description: The issue was addressed with improved UI handling. This issue is fixed in Safari 15.6, iOS 15.6 and iPadOS 15.6. Visiting a maliciously crafted website may leak sensitive data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/HT213341; https://support.apple.com/en-us/HT213346; https://support.apple.com/en-us/HT213341
CVE: CVE-2022-32824
Published: 2023-02-27
Description: The issue was addressed with improved memory handling. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6. An app may be able to disclose kernel memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/HT213340; https://support.apple.com/en-us/HT213342; https://support.apple.com/en-us/HT213346
CVE: CVE-2022-32830
Published: 2023-02-27
Description: An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.6, iOS 15.6 and iPadOS 15.6. Processing a maliciously crafted image may lead to disclosure of user information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213342; https://support.apple.com/en-us/HT213346; https://support.apple.com/en-us/HT213342
CVE: CVE-2022-32836
Published: 2023-02-27
Description: This issue was addressed with improved state management. This issue is fixed in Apple Music 3.9.10 for Android. An app may be able to access user-sensitive data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://support.apple.com/en-us/HT213473; https://support.apple.com/en-us/HT213473
CVE: CVE-2022-32844
Published: 2023-02-27
Description: A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6. An app with arbitrary kernel read and write capability may be able to bypass Pointer Authentication.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://support.apple.com/en-us/HT213340; https://support.apple.com/en-us/HT213342; https://support.apple.com/en-us/HT213346
CVE: CVE-2022-32846
Published: 2023-02-27
Description: A logic issue was addressed with improved state management. This issue is fixed in Apple Music 3.9.10 for Android. An app may be able to access user-sensitive data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-664
References: https://support.apple.com/en-us/HT213473; https://support.apple.com/en-us/HT213473
CVE: CVE-2022-32855
Published: 2023-02-27
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6. A user may be able to view restricted content from the lock screen.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/HT213346; https://support.apple.com/en-us/HT213346
CVE: CVE-2022-32891
Published: 2023-02-27
Description: The issue was addressed with improved UI handling. This issue is fixed in Safari 16, tvOS 16, watchOS 9, iOS 16. Visiting a website that frames malicious content may lead to UI spoofing.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-1021
References: https://security.gentoo.org/glsa/202305-32; https://support.apple.com/en-us/HT213442; https://support.apple.com/en-us/HT213446
CVE: CVE-2022-32896
Published: 2023-02-27
Description: This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.6, macOS Big Sur 11.7. A user may be able to view sensitive user information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/HT213443; https://support.apple.com/en-us/HT213444; https://support.apple.com/en-us/HT213443
CVE: CVE-2022-32900
Published: 2023-02-27
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6, macOS Big Sur 11.7. An app may be able to gain elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.apple.com/en-us/HT213443; https://support.apple.com/en-us/HT213444; https://support.apple.com/en-us/HT213443
CVE: CVE-2022-32902
Published: 2023-02-27
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6, macOS Big Sur 11.7. An app may be able to bypass Privacy preferences.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/HT213443; https://support.apple.com/en-us/HT213444; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-32906
Published: 2023-02-27
Description: This issue was addressed with using HTTPS when sending information over the network. This issue is fixed in Apple Music 3.9.10 for Android. A user in a privileged network position may intercept SSL/TLS connections.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-319
References: https://support.apple.com/en-us/HT213473; https://support.apple.com/en-us/HT213473
CVE: CVE-2022-32949
Published: 2023-02-27
Description: This issue was addressed with improved checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, tvOS 16. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.apple.com/en-us/HT213487; https://support.apple.com/en-us/HT213490; https://support.apple.com/en-us/HT213487
CVE: CVE-2022-42797
Published: 2023-02-27
Description: An injection issue was addressed with improved input validation. This issue is fixed in Xcode 14.1. An app may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-74
References: https://support.apple.com/en-us/HT213496; https://support.apple.com/en-us/HT213496