rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-42765 
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Problem types: cwe_id: CWE-190
description: cwe-190 Integer Overflow
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8010
Published: 2022-12-06T00:00:00.000Z
CVE-2022-42766 
In wlan driver, there is a possible missing permission check, This could lead to local information disclosure.
Problem types: cwe_id: CWE-200
description: cwe-200 Information Disclosure
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8011
Published: 2022-12-06T00:00:00.000Z
CVE-2022-42767 
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Problem types: cwe_id: CWE-190
description: cwe-190 Integer Overflow
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8012
Published: 2022-12-06T00:00:00.000Z
CVE-2022-42768 
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Problem types: cwe_id: CWE-126
description: cwe-126 Buffer Over-read
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8013
Published: 2022-12-06T00:00:00.000Z
CVE-2022-42769 
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Problem types: cwe_id: CWE-125
description: cwe-125 Out-of-bounds Read
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8014
Published: 2022-12-06T00:00:00.000Z
CVE-2022-42770 
In wlan driver, there is a race condition, This could lead to local denial of service in wlan services.
Problem types: cwe_id: CWE-362
description: cwe-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8019
Published: 2022-12-06T00:00:00.000Z
CVE-2022-42771 
In wlan driver, there is a race condition, This could lead to local denial of service in wlan services.
Problem types: cwe_id: CWE-362
description: cwe-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8020
Published: 2022-12-06T00:00:00.000Z
CVE-2022-42772 
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Problem types: cwe_id: CWE-787
description: cwe-787 Out-of-bounds Write
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8021
Published: 2022-12-06T00:00:00.000Z
CVE-2022-42773 
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Problem types: cwe_id: CWE-125
description: cwe-125 Out-of-bounds Read
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8001
Published: 2022-12-06T00:00:00.000Z
CVE-2022-42774 
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Problem types: cwe_id: CWE-126
description: cwe-126 Buffer Over-read
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8002
Published: 2022-12-06T00:00:00.000Z
CVE-2022-42775 
In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel.
Problem types: cwe_id: CWE-119
description: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Published: 2022-12-06T00:00:00.000Z
CVE-2022-42776 
In UscAIEngine service, there is a missing permission check. This could lead to set up UscAIEngine service with no additional execution privileges needed.
Problem types: cwe_id: CWE-862
description: CWE-862 Missing Authorization
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Published: 2022-12-06T00:00:00.000Z
CVE-2022-42777 
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
Problem types: cwe_id: CWE-862
description: CWE-862 Missing Authorization
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Published: 2022-12-06T00:00:00.000Z
CVE-2022-42778 
In windows manager service, there is a missing permission check. This could lead to set up windows manager service with no additional execution privileges needed.
Problem types: cwe_id: CWE-862
description: CWE-862 Missing Authorization
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
Published: 2022-12-06T00:00:00.000Z
CVE-2022-42779 
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Problem types: cwe_id: CWE-126
description: cwe-126 Buffer Over-read
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8003
Published: 2022-12-06T00:00:00.000Z
CVE-2022-42780 
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Problem types: cwe_id: CWE-126
description: cwe-126 Buffer Over-read
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8005
Published: 2022-12-06T00:00:00.000Z
CVE-2022-42781 
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Problem types: cwe_id: CWE-126
description: cwe-126 Buffer Over-read
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8006
Published: 2022-12-06T00:00:00.000Z
CVE-2022-42782 
In wlan driver, there is a possible missing permission check, This could lead to local information disclosure.
Problem types: cwe_id: CWE-200
description: cwe-200 Information Disclosure
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8007
Published: 2022-12-06T00:00:00.000Z
CVE-2022-42783 
In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
Problem types: description: n/a
Affected products: vendor: Unisoc (Shanghai) Technologies Co., Ltd.
product: SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
default_status: unaffected
Published: 2023-02-06T05:27:38.699Z
CVE-2022-42784 
A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions >= V8.3), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions >= V8.3), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions >= V8.3), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions >= V8.3), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions >= V8.3), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions >= V8.3), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions >= V8.3), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions >= V8.3), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions >= V8.3). Affected devices are vulnerable to an electromagnetic fault injection. This could allow an attacker to dump and debug the firmware, including the manipulation of memory. Further actions could allow to inject public keys of custom created key pairs which are then signed by the product CA. The generation of a custom certificate allows communication with, and impersonation of, any device of the same version.
Problem types: cwe_id: CWE-1319
description: CWE-1319: Improper Protection against Electromagnetic Fault Injection (EM-FI)
Affected products: vendor: Siemens
product: LOGO! 12/24RCE
default_status: unknown
vendor: Siemens
product: LOGO! 12/24RCEo
default_status: unknown
vendor: Siemens
product: LOGO! 230RCE
default_status: unknown
vendor: Siemens
product: LOGO! 230RCEo
default_status: unknown
vendor: Siemens
product: LOGO! 24CE
default_status: unknown
vendor: Siemens
product: LOGO! 24CEo
default_status: unknown
vendor: Siemens
product: LOGO! 24RCE
default_status: unknown
vendor: Siemens
product: LOGO! 24RCEo
default_status: unknown
vendor: Siemens
product: SIPLUS LOGO! 12/24RCE
default_status: unknown
vendor: Siemens
product: SIPLUS LOGO! 12/24RCEo
default_status: unknown
vendor: Siemens
product: SIPLUS LOGO! 230RCE
default_status: unknown
vendor: Siemens
product: SIPLUS LOGO! 230RCEo
default_status: unknown
vendor: Siemens
product: SIPLUS LOGO! 24CE
default_status: unknown
vendor: Siemens
product: SIPLUS LOGO! 24CEo
default_status: unknown
vendor: Siemens
product: SIPLUS LOGO! 24RCE
default_status: unknown
vendor: Siemens
product: SIPLUS LOGO! 24RCEo
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
baseScore: 7.6
baseSeverity: HIGH
Published: 2023-12-12T10:02:37.510Z
CVE-2022-42785 Wiesemann & Theis: Authentication bypass in Com-Server family
Multiple W&T products of the ComServer Series are prone to an authentication bypass. An unathenticated remote attacker, can log in without knowledge of the password by crafting a modified HTTP GET Request.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: Wiesemann & Theis
product: Com-Server LC
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server PoE 3 x Isolated
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server 20mA
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server ++
default_status: unaffected
vendor: Wiesemann & Theis
product: AT-Modem-Emulator
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server UL
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed 100BaseFX
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed 100BaseLX
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed Office 1 Port
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed Office 4 Port
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed Industry
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed OEM
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed Compact
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed Isolated
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed 19" 1Port
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed 19" 4Port
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed PoE
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2022-11-10T11:01:41.011Z
CVE-2022-42786 Wiesemann & Theis: XSS vulnerability in web interface of the Com-Server family
Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into the title of the configuration webpage
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Wiesemann & Theis
product: Com-Server LC
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server PoE 3 x Isolated
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server 20mA
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server ++
default_status: unaffected
vendor: Wiesemann & Theis
product: AT-Modem-Emulator
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server UL
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed 100BaseFX
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed 100BaseLX
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed Office 1 Port
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed Office 4 Port
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed Industry
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed OEM
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed Compact
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed Isolated
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed 19" 1Port
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed 19" 4Port
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed PoE
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
version: 3.1
Published: 2022-11-10T11:02:32.615Z
CVE-2022-42787 Wiesemann & Theis: Small number space for allocating session id in Com-Server family
Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids. After login of an user an unathenticated remote attacker can brute force the users session id and get access to his account on the the device. As the user needs to log in for the attack to be successful a user interaction is required.
Problem types: cwe_id: CWE-330
description: CWE-330 Use of Insufficiently Random Values
Affected products: vendor: Wiesemann & Theis
product: Com-Server LC
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server PoE 3 x Isolated
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server 20mA
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server ++
default_status: unaffected
vendor: Wiesemann & Theis
product: AT-Modem-Emulator
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server UL
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed 100BaseFX
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed 100BaseLX
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed Office 1 Port
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed Office 4 Port
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed Industry
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed OEM
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed Compact
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed Isolated
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed 19" 1Port
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed 19" 4Port
default_status: unaffected
vendor: Wiesemann & Theis
product: Com-Server Highspeed PoE
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Published: 2022-11-10T11:06:20.856Z
CVE-2022-42788 
A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in macOS Ventura 13. A malicious application may be able to read sensitive location information.
Problem types: description: A malicious application may be able to read sensitive location information
Affected products: vendor: Apple
product: macOS
Published: 2022-11-01T00:00:00.000Z
CVE-2022-42789 
An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. An app may be able to access user-sensitive data.
Problem types: description: An app may be able to access user-sensitive data
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2022-11-01T00:00:00.000Z
CVE-2022-42790 
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, macOS Monterey 12.6. A user may be able to view restricted content from the lock screen.
Problem types: description: A user may be able to view restricted content from the lock screen
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2022-11-01T00:00:00.000Z
CVE-2022-42791 
A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.
Problem types: description: An app may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
Published: 2022-11-01T00:00:00.000Z
CVE-2022-42792 
This issue was addressed with improved data protection. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to read sensitive location information
Problem types: description: An app may be able to read sensitive location information
Affected products: vendor: Apple
product: iOS and iPadOS
Published: 2023-06-23T00:00:00.000Z
CVE-2022-42793 
An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, macOS Monterey 12.6. An app may be able to bypass code signing checks.
Problem types: description: An app may be able to bypass code signing checks
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2022-11-01T00:00:00.000Z
CVE-2022-42795 
A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 16, iOS 16, macOS Ventura 13, watchOS 9. Processing a maliciously crafted image may lead to arbitrary code execution.
Problem types: description: Processing a maliciously crafted image may lead to arbitrary code execution
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
Published: 2022-11-01T00:00:00.000Z
CVE-2022-42796 
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 15.7 and iPadOS 15.7, macOS Ventura 13. An app may be able to gain elevated privileges.
Problem types: description: An app may be able to gain elevated privileges
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2022-11-01T00:00:00.000Z
CVE-2022-42797 
An injection issue was addressed with improved input validation. This issue is fixed in Xcode 14.1. An app may be able to gain root privileges.
Problem types: description: An app may be able to gain root privileges
Affected products: vendor: Apple
product: Xcode
Published: 2023-02-27T00:00:00.000Z
CVE-2022-42798 
The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. Parsing a maliciously crafted audio file may lead to disclosure of user information.
Problem types: description: Parsing a maliciously crafted audio file may lead to disclosure of user information
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: tvOS
vendor: Apple
product: tvOS
vendor: Apple
product: tvOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2022-11-01T00:00:00.000Z
CVE-2022-42799 
The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Visiting a malicious website may lead to user interface spoofing.
Problem types: description: Visiting a malicious website may lead to user interface spoofing
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: tvOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2022-11-01T00:00:00.000Z
CVE-2022-42800 
This issue was addressed with improved checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. A user may be able to cause unexpected app termination or arbitrary code execution.
Problem types: description: A user may be able to cause unexpected app termination or arbitrary code execution
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: watchOS
Published: 2022-11-01T00:00:00.000Z
CVE-2022-42801 
A logic issue was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1. An app may be able to execute arbitrary code with kernel privileges.
Problem types: description: An app may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: tvOS
vendor: Apple
product: tvOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2022-11-01T00:00:00.000Z