deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-25184
Published: 2022-03-18
Description: Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x stores the password in plaintext in a file that is in the same directory as the executable file. ISaGRAF Runtime reads the file and saves the data in a variable without any additional modification. A local, unauthenticated attacker could compromise the user passwords, resulting in information disclosure.
CVSS Score: 7.8 (HIGH)
CWE: CWE-256, CWE-522
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-04; https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131699; https://www.cisa.gov/uscert/ics/advisories/icsa-20-280-01
CVE: CVE-2020-25193
Published: 2022-03-18
Description: By having access to the hard-coded cryptographic key for GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06, attackers would be able to intercept and decrypt encrypted traffic through an HTTPS connection.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-321, CWE-798
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-005-03; https://www.gegridsolutions.com/app/DownloadFile.aspx?prod=RT430&type=21&file=5; https://www.cisa.gov/uscert/ics/advisories/icsa-21-005-03
CVE: CVE-2020-25197
Published: 2022-03-18
Description: A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06 that could allow an authenticated remote attacker to execute arbitrary code on the system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-005-03; https://www.gegridsolutions.com/app/DownloadFile.aspx?prod=RT430&type=21&file=5; https://www.cisa.gov/uscert/ics/advisories/icsa-21-005-03
CVE: CVE-2021-23150
Published: 2022-03-18
Description: Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability discovered in AMP for WP – Accelerated Mobile Pages plugin <= 1.0.77.31 versions.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/accelerated-mobile-pages/wordpress-amp-for-wp-accelerated-mobile-pages-plugin-1-0-77-31-authenticated-stored-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/accelerated-mobile-pages/wordpress-amp-for-wp-accelerated-mobile-pages-plugin-1-0-77-31-authenticated-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2021-23209
Published: 2022-03-18
Description: Multiple Authenticated (admin user role) Persistent Cross-Site Scripting (XSS) vulnerabilities discovered in AMP for WP – Accelerated Mobile Pages WordPress plugin (versions <= 1.0.77.32).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/accelerated-mobile-pages/wordpress-amp-for-wp-accelerated-mobile-pages-plugin-1-0-77-32-multiple-authenticated-persistent-cross-site-scripting-xss-vulnerabilities?_s_id=cve; https://patchstack.com/database/vulnerability/accelerated-mobile-pages/wordpress-amp-for-wp-accelerated-mobile-pages-plugin-1-0-77-32-multiple-authenticated-persistent-cross-site-scripting-xss-vulnerabilities?_s_id=cve
CVE: CVE-2021-27789
Published: 2022-03-18
Description: The Web application of Brocade Fabric OS before versions Brocade Fabric OS v9.0.1a and v8.2.3a contains debug statements that expose sensitive information to the program's standard output device. An attacker who has compromised the FOS system may utilize this weakness to capture sensitive information, such as user credentials.
CVSS Score: 6.5 (MEDIUM)
References: https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1494; https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1494
CVE: CVE-2021-30771
Published: 2022-03-18
Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, iOS 14.6 and iPadOS 14.6, watchOS 7.5, tvOS 14.6. Processing a maliciously crafted font file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212528; https://support.apple.com/en-us/HT212529; https://support.apple.com/en-us/HT212532
CVE: CVE-2021-44760
Published: 2022-03-18
Description: Auth. (admin+) Reflected Cross-Site Scripting (XSS) vulnerability discovered in WP-DownloadManager plugin <= 1.68.6 versions.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/wp-downloadmanager/wordpress-wp-downloadmanager-plugin-1-68-6-authenticated-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-downloadmanager/wordpress-wp-downloadmanager-plugin-1-68-6-authenticated-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2021-4031
Published: 2022-03-18
Description: Syltek application before its 10.22.00 version, does not correctly check that a product ID has a valid payment associated to it. This could allow an attacker to forge a request and bypass the payment system by marking items as payed without any verification.
CVSS Score: 7.5 (HIGH)
CWE: CWE-345, CWE-345
References: https://www.incibe-cert.es/en/early-warning/security-advisories/syltek-insufficient-verification-data-authenticity; https://www.incibe-cert.es/en/early-warning/security-advisories/syltek-insufficient-verification-data-authenticity
CVE: CVE-2022-0547
Published: 2022-03-18
Description: OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-305, CWE-287
References: https://community.openvpn.net/openvpn/wiki/CVE-2022-0547; https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements; https://lists.debian.org/debian-lts-announce/2022/05/msg00002.html
CVE: CVE-2022-1002
Published: 2022-03-18
Description: Mattermost 6.3.0 and earlier fails to properly sanitize the HTML content in the email invitation sent to guest users, which allows registered users with special permissions to invite guest users to inject unescaped HTML content in the email invitations.
CVSS Score: 2.0 (LOW)
CWE: CWE-80, CWE-79
References: https://hackerone.com/reports/1443567; https://mattermost.com/security-updates/; https://hackerone.com/reports/1443567
CVE: CVE-2022-1003
Published: 2022-03-18
Description: One of the API in Mattermost version 6.3.0 and earlier fails to properly protect the permissions, which allows the system administrators to combine the two distinct privileges/capabilities in a way that allows them to override certain restricted configurations like EnableUploads.
CVSS Score: 3.3 (LOW)
CWE: CWE-268, CWE-269
References: https://mattermost.com/security-updates/; https://mattermost.com/security-updates/
CVE: CVE-2022-1011
Published: 2022-03-18
Description: A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=2064855; https://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse.git/commit/?h=for-next; https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html
CVE: CVE-2022-22578
Published: 2022-03-18
Description: A logic issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and iPadOS 15.3, watchOS 8.4, macOS Monterey 12.2. A malicious application may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT213053; https://support.apple.com/en-us/HT213054; https://support.apple.com/en-us/HT213057
CVE: CVE-2022-22579
Published: 2022-03-18
Description: An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, tvOS 15.3, Security Update 2022-001 Catalina, macOS Monterey 12.2, macOS Big Sur 11.6.3. Processing a maliciously crafted STL file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT213053; https://support.apple.com/en-us/HT213054; https://support.apple.com/en-us/HT213055
CVE: CVE-2022-22583
Published: 2022-03-18
Description: A permissions issue was addressed with improved validation. This issue is fixed in Security Update 2022-001 Catalina, macOS Monterey 12.2, macOS Big Sur 11.6.3. An application may be able to access restricted files.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213054; https://support.apple.com/en-us/HT213055; https://support.apple.com/en-us/HT213056
CVE: CVE-2022-22584
Published: 2022-03-18
Description: A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and iPadOS 15.3, watchOS 8.4, macOS Monterey 12.2. Processing a maliciously crafted file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213053; https://support.apple.com/en-us/HT213054; https://support.apple.com/en-us/HT213057
CVE: CVE-2022-22585
Published: 2022-03-18
Description: An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, macOS Monterey 12.2, macOS Big Sur 11.6.3. An application may be able to access a user's files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-59
References: https://support.apple.com/en-us/HT213053; https://support.apple.com/en-us/HT213054; https://support.apple.com/en-us/HT213055
CVE: CVE-2022-22586
Published: 2022-03-18
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213054; https://support.apple.com/en-us/HT213054
CVE: CVE-2022-22587
Published: 2022-03-18
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3, macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT213053; https://support.apple.com/en-us/HT213054; https://support.apple.com/en-us/HT213055
CVE: CVE-2022-22588
Published: 2022-03-18
Description: A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 15.2.1 and iPadOS 15.2.1. Processing a maliciously crafted HomeKit accessory name may cause a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/en-us/HT213043; https://support.apple.com/en-us/HT213043
CVE: CVE-2022-22589
Published: 2022-03-18
Description: A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing a maliciously crafted mail message may lead to running arbitrary javascript.
CVSS Score: 6.1 (MEDIUM)
References: http://seclists.org/fulldisclosure/2022/May/33; http://seclists.org/fulldisclosure/2022/May/35; https://security.gentoo.org/glsa/202208-39
CVE: CVE-2022-22590
Published: 2022-03-18
Description: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://security.gentoo.org/glsa/202208-39; https://support.apple.com/en-us/HT213053; https://support.apple.com/en-us/HT213054
CVE: CVE-2022-22591
Published: 2022-03-18
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213054; https://support.apple.com/en-us/HT213054
CVE: CVE-2022-22592
Published: 2022-03-18
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.
CVSS Score: 6.5 (MEDIUM)
References: https://security.gentoo.org/glsa/202208-39; https://support.apple.com/en-us/HT213053; https://support.apple.com/en-us/HT213054
CVE: CVE-2022-22593
Published: 2022-03-18
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Security Update 2022-001 Catalina, macOS Monterey 12.2, macOS Big Sur 11.6.3. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/en-us/HT213053; https://support.apple.com/en-us/HT213054; https://support.apple.com/en-us/HT213055
CVE: CVE-2022-22594
Published: 2022-03-18
Description: A cross-origin issue in the IndexDB API was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. A website may be able to track sensitive user information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-346
References: https://support.apple.com/en-us/HT213053; https://support.apple.com/en-us/HT213054; https://support.apple.com/en-us/HT213057
CVE: CVE-2022-22596
Published: 2022-03-18
Description: A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213193; https://support.apple.com/en-us/HT213182
CVE: CVE-2022-22597
Published: 2022-03-18
Description: A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213184; https://support.apple.com/en-us/HT213185
CVE: CVE-2022-22598
Published: 2022-03-18
Description: An issue with app access to camera metadata was addressed with improved logic. This issue is fixed in iOS 15.4 and iPadOS 15.4. An app may be able to learn information about the current camera view before being granted camera access.
CVSS Score: 3.3 (LOW)
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213182
CVE: CVE-2022-22599
Published: 2022-03-18
Description: Description: A permissions issue was addressed with improved validation. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, macOS Monterey 12.3. A person with physical access to a device may be able to use Siri to obtain some location information from the lock screen.
CVSS Score: 2.4 (LOW)
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213184
CVE: CVE-2022-22600
Published: 2022-03-18
Description: The issue was addressed with improved permissions logic. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. A malicious application may be able to bypass certain Privacy preferences.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213186
CVE: CVE-2022-22601
Published: 2022-03-18
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213189; https://support.apple.com/en-us/HT213189
CVE: CVE-2022-22602
Published: 2022-03-18
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213189; https://support.apple.com/en-us/HT213189
CVE: CVE-2022-22603
Published: 2022-03-18
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213189; https://support.apple.com/en-us/HT213189
CVE: CVE-2022-22604
Published: 2022-03-18
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213189; https://support.apple.com/en-us/HT213189
CVE: CVE-2022-22605
Published: 2022-03-18
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213189; https://support.apple.com/en-us/HT213189
CVE: CVE-2022-22606
Published: 2022-03-18
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213189; https://support.apple.com/en-us/HT213189
CVE: CVE-2022-22607
Published: 2022-03-18
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213189; https://support.apple.com/en-us/HT213189
CVE: CVE-2022-22608
Published: 2022-03-18
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213189; https://support.apple.com/en-us/HT213189
CVE: CVE-2022-22609
Published: 2022-03-18
Description: The issue was addressed with additional permissions checks. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. A malicious application may be able to read other applications' settings.
CVSS Score: 7.5 (HIGH)
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213186
CVE: CVE-2022-22611
Published: 2022-03-18
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213186
CVE: CVE-2022-22612
Published: 2022-03-18
Description: A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to heap corruption.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213186
CVE: CVE-2022-22613
Published: 2022-03-18
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, macOS Monterey 12.3. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213184
CVE: CVE-2022-22614
Published: 2022-03-18
Description: A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, macOS Monterey 12.3. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213184
CVE: CVE-2022-22615
Published: 2022-03-18
Description: A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, macOS Monterey 12.3. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213184
CVE: CVE-2022-22617
Published: 2022-03-18
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to gain elevated privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213184; https://support.apple.com/en-us/HT213185
CVE: CVE-2022-22618
Published: 2022-03-18
Description: This issue was addressed with improved checks. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4. A user may be able to bypass the Emergency SOS passcode prompt.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213193; https://support.apple.com/en-us/HT213182
CVE: CVE-2022-22620
Published: 2022-03-18
Description: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 (v. 16612.4.9.1.8 and 15612.4.9.1.8). Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://security.gentoo.org/glsa/202208-39; https://support.apple.com/en-us/HT213091; https://support.apple.com/en-us/HT213092