Macos

macos

Vendor: Apple • 3,171 CVEs

CVEs (3,171)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-32207 6Apple DebianFedoraproject+3 more 14Bootstrap Os Clustered Data OntapCurl+11 more Oct 14, 2026 Jul 7, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation...Show more When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally widen the permissions for the target file, leaving the updated file accessible to more users than intended.Show less
CVE-2022-32205 7Apple DebianFedoraproject+4 more 19Clustered Data Ontap CurlDebian Linux+16 more Oct 14, 2026 Jul 7, 2022 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them. A sufficiently large amount of (big) cookies make subsequent HTTP requests to this,...Show more A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them. A sufficiently large amount of (big) cookies make subsequent HTTP requests to this, or other servers to which the cookies match, create requests that become larger than the threshold that curl uses internally to avoid sending crazy large requests (1048576 bytes) and instead returns an error.This denial state might remain for as long as the same cookies are kept, match and haven't expired. Due to cookie matching rules, a server on `foo.example.com` can set cookies that also would match for `bar.example.com`, making it it possible for a "sister server" to effectively cause a denial of service for a sibling site on the same second level domain using this method.Show less
CVE-2022-1720 4Apple DebianFedoraproject+1 more 4Debian Linux FedoraMacos+1 more Jun 17, 2026 Jun 20, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.
CVE-2022-2126 4Apple DebianFedoraproject+1 more 4Debian Linux FedoraMacos+1 more Oct 8, 2026 Jun 19, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2125 3Apple FedoraprojectVim 3Fedora MacosVim Oct 8, 2026 Jun 19, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-2124 4Apple DebianFedoraproject+1 more 4Debian Linux FedoraMacos+1 more Oct 8, 2026 Jun 19, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Buffer Over-read in GitHub repository vim/vim prior to 8.2.
CVE-2022-2042 2Apple Vim 2Macos Vim Oct 8, 2026 Jun 10, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Use After Free in GitHub repository vim/vim prior to 8.2.
CVE-2022-2000 4Apple DebianFedoraproject+1 more 4Debian Linux FedoraMacos+1 more Jun 17, 2026 Jun 9, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
CVE-2022-1968 3Apple DebianVim 3Debian Linux MacosVim Jun 17, 2026 Jun 2, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Use After Free in GitHub repository vim/vim prior to 8.2.
CVE-2022-1942 4Apple DebianFedoraproject+1 more 4Debian Linux FedoraMacos+1 more Jun 17, 2026 May 31, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-1927 3Apple FedoraprojectVim 3Fedora MacosVim Jun 17, 2026 May 29, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Buffer Over-read in GitHub repository vim/vim prior to 8.2.
CVE-2022-1897 4Apple DebianFedoraproject+1 more 4Debian Linux FedoraMacos+1 more Jun 17, 2026 May 27, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
CVE-2022-1898 4Apple DebianFedoraproject+1 more 4Debian Linux FedoraMacos+1 more Jun 17, 2026 May 27, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Use After Free in GitHub repository vim/vim prior to 8.2.
CVE-2022-26776 1Apple 1Macos Jun 17, 2026 May 26, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An attacker may be able to cause unexpected application termination or arbitrary code execution.
CVE-2022-26775 1Apple 2Mac Os X Macos Jun 17, 2026 May 26, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. An attacker may be able to cause unexpected application termination or arbi...Show more An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. An attacker may be able to cause unexpected application termination or arbitrary code execution.Show less
CVE-2022-26772 1Apple 1Macos Jun 17, 2026 May 26, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.
CVE-2022-26770 1Apple 2Mac Os X Macos Jun 17, 2026 May 26, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execut...Show more An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute arbitrary code with kernel privileges.Show less
CVE-2022-26769 1Apple 2Mac Os X Macos Jun 17, 2026 May 26, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 A memory corruption issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute...Show more A memory corruption issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute arbitrary code with kernel privileges.Show less
CVE-2022-26768 1Apple 5Ipados Iphone OsMacos+2 more Jun 17, 2026 May 26, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4, watchOS 8.6, tvOS 15.5, macOS Big Sur 11.6.6. An application may be able to execute arbitrary code with...Show more A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4, watchOS 8.6, tvOS 15.5, macOS Big Sur 11.6.6. An application may be able to execute arbitrary code with kernel privileges.Show less
CVE-2022-26767 1Apple 1Macos Jun 17, 2026 May 26, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The issue was addressed with additional permissions checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to bypass Privacy preferences.

Previous 1...124125126...159 Next