deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-32898
Published: 2022-11-01
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS Ventura 13, watchOS 9. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT213445; https://support.apple.com/en-us/HT213446; https://support.apple.com/en-us/HT213486
CVE: CVE-2022-32899
Published: 2022-11-01
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS Ventura 13, watchOS 9. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT213445; https://support.apple.com/en-us/HT213446; https://support.apple.com/en-us/HT213486
CVE: CVE-2022-32903
Published: 2022-11-01
Description: A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://support.apple.com/en-us/HT213446; https://support.apple.com/en-us/HT213486; https://support.apple.com/en-us/HT213487
CVE: CVE-2022-32904
Published: 2022-11-01
Description: An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/HT213443; https://support.apple.com/en-us/HT213444; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-32905
Published: 2022-11-01
Description: This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted DMG file may lead to arbitrary code execution with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59, CWE-59
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-32907
Published: 2022-11-01
Description: This issue was addressed with improved checks. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://packetstormsecurity.com/files/169930/AppleAVD-AppleAVDUserClient-decodeFrameFig-Memory-Corruption.html; https://support.apple.com/en-us/HT213446; https://support.apple.com/en-us/HT213486
CVE: CVE-2022-32909
Published: 2022-11-01
Description: The issue was addressed with improved handling of caches. This issue is fixed in iOS 16. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-524
References: https://support.apple.com/en-us/HT213446; https://support.apple.com/en-us/HT213446
CVE: CVE-2022-32910
Published: 2022-11-01
Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.8, macOS Monterey 12.5, Security Update 2022-005 Catalina. An archive may be able to bypass Gatekeeper.
CVSS Score: 7.5 (HIGH)
CWE: CWE-693
References: https://support.apple.com/en-us/HT213343; https://support.apple.com/en-us/HT213344; https://support.apple.com/en-us/HT213345
CVE: CVE-2022-32913
Published: 2022-11-01
Description: The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, watchOS 9, macOS Monterey 12.6, tvOS 16. A sandboxed app may be able to determine which app is currently using the camera.
CVSS Score: 3.3 (LOW)
CWE: CWE-200
References: https://support.apple.com/en-us/HT213443; https://support.apple.com/en-us/HT213444; https://support.apple.com/en-us/HT213446
CVE: CVE-2022-32914
Published: 2022-11-01
Description: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, watchOS 9, macOS Monterey 12.6, tvOS 16. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://support.apple.com/en-us/HT213443; https://support.apple.com/en-us/HT213444; https://support.apple.com/en-us/HT213446
CVE: CVE-2022-32915
Published: 2022-11-01
Description: A type confusion issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843, CWE-843
References: http://seclists.org/fulldisclosure/2023/Jan/20; https://support.apple.com/en-us/HT213488; https://support.apple.com/kb/HT213604
CVE: CVE-2022-32918
Published: 2022-11-01
Description: This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to bypass Privacy preferences.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/HT213446; https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213446
CVE: CVE-2022-32922
Published: 2022-11-01
Description: A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213495
CVE: CVE-2022-32923
Published: 2022-11-01
Description: A correctness issue in the JIT was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose internal states of the app.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2022/11/04/4; https://security.gentoo.org/glsa/202305-32; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-32924
Published: 2022-11-01
Description: The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Big Sur 11.7, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.com/files/170010/XNU-Dangling-PTE-Entry.html; https://support.apple.com/en-us/HT213443; https://support.apple.com/en-us/HT213444
CVE: CVE-2022-32925
Published: 2022-11-01
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to cause unexpected system termination or write kernel memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT213446; https://support.apple.com/en-us/HT213486; https://support.apple.com/en-us/HT213487
CVE: CVE-2022-32926
Published: 2022-11-01
Description: The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16. An app with root privileges may be able to execute arbitrary code with kernel privileges.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-119
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213490
CVE: CVE-2022-32927
Published: 2022-11-01
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. Joining a malicious Wi-Fi network may result in a denial-of-service of the Settings app.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213490; https://support.apple.com/en-us/HT213489
CVE: CVE-2022-32928
Published: 2022-11-01
Description: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. A user in a privileged network position may be able to intercept mail credentials.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://support.apple.com/en-us/HT213446; https://support.apple.com/en-us/HT213486; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-32929
Published: 2022-11-01
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 15.7 and iPadOS 15.7, iOS 16.1 and iPadOS 16. An app may be able to access iOS backups.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: https://support.apple.com/en-us/HT213445; https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213490
CVE: CVE-2022-32932
Published: 2022-11-01
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16, watchOS 9.1. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213490; https://support.apple.com/en-us/HT213491
CVE: CVE-2022-32934
Published: 2022-11-01
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. A remote user may be able to cause kernel code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/en-us/HT213443; https://support.apple.com/en-us/HT213444; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-32935
Published: 2022-11-01
Description: A lock screen issue was addressed with improved state management. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16, macOS Ventura 13. A user may be able to view restricted content from the lock screen.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-287
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213490
CVE: CVE-2022-32936
Published: 2022-11-01
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13. An app may be able to disclose kernel memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-32938
Published: 2022-11-01
Description: A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. A shortcut may be able to check the existence of an arbitrary path on the file system.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-32939
Published: 2022-11-01
Description: The issue was addressed with improved bounds checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213490; https://support.apple.com/en-us/HT213489
CVE: CVE-2022-32940
Published: 2022-11-01
Description: The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213491
CVE: CVE-2022-32941
Published: 2022-11-01
Description: The issue was addressed with improved bounds checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. A buffer overflow may result in arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213490
CVE: CVE-2022-32944
Published: 2022-11-01
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213490
CVE: CVE-2022-32946
Published: 2022-11-01
Description: This issue was addressed with improved entitlements. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to record audio using a pair of connected AirPods.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213489
CVE: CVE-2022-32947
Published: 2022-11-01
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213489; https://support.apple.com/en-us/HT213491
CVE: CVE-2022-3305
Published: 2022-11-01
Description: Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html; https://crbug.com/1319229; https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html
CVE: CVE-2022-3306
Published: 2022-11-01
Description: Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html; https://crbug.com/1320139; https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html
CVE: CVE-2022-3307
Published: 2022-11-01
Description: Use after free in media in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-362, CWE-362
References: https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html; https://crbug.com/1323488; https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html
CVE: CVE-2022-3308
Published: 2022-11-01
Description: Insufficient policy enforcement in developer tools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVSS Score: 7.4 (HIGH)
CWE: CWE-602
References: https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html; https://crbug.com/1342722; https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html
CVE: CVE-2022-3309
Published: 2022-11-01
Description: Use after free in assistant in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via specific UI gestures. (Chromium security severity: Medium)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html; https://crbug.com/1348415; https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html
CVE: CVE-2022-3310
Published: 2022-11-01
Description: Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. (Chromium security severity: Medium)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-602
References: https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html; https://crbug.com/1240065; https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html
CVE: CVE-2022-3311
Published: 2022-11-01
Description: Use after free in import in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html; https://crbug.com/1302813; https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html
CVE: CVE-2022-3312
Published: 2022-11-01
Description: Insufficient validation of untrusted input in VPN in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a local attacker to bypass managed device restrictions via physical access to the device. (Chromium security severity: Medium)
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html; https://crbug.com/1303306; https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html
CVE: CVE-2022-3313
Published: 2022-11-01
Description: Incorrect security UI in full screen in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Medium)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-451
References: https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html; https://crbug.com/1317904; https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html
CVE: CVE-2022-3314
Published: 2022-11-01
Description: Use after free in logging in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html; https://crbug.com/1328708; https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html
CVE: CVE-2022-3315
Published: 2022-11-01
Description: Type confusion in Blink in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html; https://crbug.com/1322812; https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html
CVE: CVE-2022-3316
Published: 2022-11-01
Description: Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass security feature via a crafted HTML page. (Chromium security severity: Low)
CVSS Score: 4.3 (MEDIUM)
References: https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html; https://crbug.com/1333623; https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html
CVE: CVE-2022-3317
Published: 2022-11-01
Description: Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)
CVSS Score: 4.3 (MEDIUM)
References: https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html; https://crbug.com/1300539; https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html
CVE: CVE-2022-3318
Published: 2022-11-01
Description: Use after free in ChromeOS Notifications in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to reboot Chrome OS to potentially exploit heap corruption via UI interaction. (Chromium security severity: Low)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-404
References: https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html; https://crbug.com/1318791; https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html
CVE: CVE-2022-3443
Published: 2022-11-01
Description: Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a crafted HTML page. (Chromium security severity: Low)
CVSS Score: 4.3 (MEDIUM)
References: https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html; https://crbug.com/1243802; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
CVE: CVE-2022-3444
Published: 2022-11-01
Description: Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a crafted HTML page and malicious file. (Chromium security severity: Low)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html; https://crbug.com/1208439; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
CVE: CVE-2022-3807
Published: 2022-11-01
Description: A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Incomplete Fix CVE-2019-13238. The manipulation leads to resource consumption. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212660.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-404, CWE-252
References: https://github.com/axiomatic-systems/Bento4/files/9820612/mp42aac_exhaustive_AP4_RtpAtom50.zip; https://github.com/axiomatic-systems/Bento4/issues/803; https://vuldb.com/?id.212660
CVE: CVE-2022-3808
Published: 2022-11-01
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2022-42788
Published: 2022-11-01
Description: A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in macOS Ventura 13. A malicious application may be able to read sensitive location information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863
References: https://support.apple.com/en-us/HT213488; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-42789
Published: 2022-11-01
Description: An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213443; https://support.apple.com/en-us/HT213444; https://support.apple.com/en-us/HT213488
CVE: CVE-2022-42790
Published: 2022-11-01
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, macOS Monterey 12.6. A user may be able to view restricted content from the lock screen.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213443; https://support.apple.com/en-us/HT213444; https://support.apple.com/en-us/HT213445