Apple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-24070 4Apache AppleDebian+1 more 4Debian Linux FedoraMacos+1 more Jun 17, 2026 Apr 12, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn se...Show more Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (inclusive). Servers that do not use mod_dav_svn are not affected.Show less
CVE-2021-28544 4Apache AppleDebian+1 more 4Debian Linux FedoraMacos+1 more Jun 17, 2026 Apr 12, 2022 N/A· v4 4.3 MEDIUM· v3 3.5 LOW· v2 Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization (authz) rules. When a node has been copied...Show more Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization (authz) rules. When a node has been copied from a protected location, users with access to the copy can see the 'copyfrom' path of the original. This also reveals the fact that the node was copied. Only the 'copyfrom' path is revealed; not its contents. Both httpd and svnserve servers are vulnerable.Show less
CVE-2022-24836 4Apple DebianFedoraproject+1 more 4Debian Linux FedoraMacos+1 more Jun 17, 2026 Apr 11, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `< v1.13.4` contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents...Show more Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `< v1.13.4` contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents. Users are advised to upgrade to Nokogiri `>= 1.13.4`. There are no known workarounds for this issue.Show less
CVE-2018-25032 11Apple AzulDebian+8 more 27Active Iq Unified Manager Debian LinuxE Series Santricity Os Controller+24 more Oct 14, 2026 Mar 25, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
CVE-2020-20095 1Apple 1Imessage Jun 17, 2026 Mar 23, 2022 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 iMessage (Messages app) iOS 12.4 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages.
CVE-2022-22671 1Apple 2Ipados Iphone Os Jun 17, 2026 Mar 18, 2022 N/A· v4 4.6 MEDIUM· v3 2.1 LOW· v2 An authentication issue was addressed with improved state management. This issue is fixed in iOS 15.4 and iPadOS 15.4. A person with physical access to an iOS device may be able to access photos from the lock screen.
CVE-2022-22670 1Apple 4Ipados Iphone OsTvos+1 more Jun 17, 2026 Mar 18, 2022 N/A· v4 3.3 LOW· v3 4.3 MEDIUM· v2 An access issue was addressed with improved access restrictions. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, watchOS 8.5. A malicious application may be able to identify what other applications a user has...Show more An access issue was addressed with improved access restrictions. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, watchOS 8.5. A malicious application may be able to identify what other applications a user has installed.Show less
CVE-2022-22669 1Apple 1Macos Jun 17, 2026 Mar 18, 2022 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3. An application may be able to execute arbitrary code with kernel privileges.
CVE-2022-22667 1Apple 2Ipados Iphone Os Jun 17, 2026 Mar 18, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.4 and iPadOS 15.4. An application may be able to execute arbitrary code with kernel privileges.
CVE-2022-22666 1Apple 4Ipados Iphone OsTvos+1 more Jun 17, 2026 Mar 18, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, watchOS 8.5. Processing a maliciously crafted image may lead to heap corruption.
CVE-2022-22665 1Apple 2Mac Os X Macos Jun 17, 2026 Mar 18, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to gain root privileges.
CVE-2022-22664 1Apple 3Garageband Logic Pro XMacos Jun 17, 2026 Mar 18, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application te...Show more An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.Show less
CVE-2022-22661 1Apple 2Mac Os X Macos Jun 17, 2026 Mar 18, 2022 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to execute arbitrary code...Show more A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to execute arbitrary code with kernel privileges.Show less
CVE-2022-22660 1Apple 1Macos Jun 17, 2026 Mar 18, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 This issue was addressed with a new entitlement. This issue is fixed in macOS Monterey 12.3. An app may be able to spoof system notifications and UI.
CVE-2022-22659 1Apple 2Ipados Iphone Os Jun 17, 2026 Mar 18, 2022 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 A logic issue was addressed with improved state management. This issue is fixed in iOS 15.4 and iPadOS 15.4. An attacker in a privileged network position may be able to leak sensitive user information.
CVE-2022-22657 1Apple 3Garageband Logic Pro XMacos Jun 17, 2026 Mar 18, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A memory initialization issue was addressed with improved memory handling. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected applic...Show more A memory initialization issue was addressed with improved memory handling. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.Show less
CVE-2022-22656 1Apple 2Mac Os X Macos Jun 17, 2026 Mar 18, 2022 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A local attacker may be able to view the previous...Show more An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A local attacker may be able to view the previous logged in user’s desktop from the fast user switching screen.Show less
CVE-2022-22654 1Apple 2Safari Watchos Jun 17, 2026 Mar 18, 2022 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 A user interface issue was addressed. This issue is fixed in watchOS 8.5, Safari 15.4. Visiting a malicious website may lead to address bar spoofing.
CVE-2022-22653 1Apple 2Ipados Iphone Os Jun 17, 2026 Mar 18, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.4 and iPadOS 15.4. A malicious website may be able to access information about the user and their devices.
CVE-2022-22652 1Apple 2Ipados Iphone Os Jun 17, 2026 Mar 18, 2022 N/A· v4 6.1 MEDIUM· v3 3.6 LOW· v2 The GSMA authentication panel could be presented on the lock screen. The issue was resolved by requiring device unlock to interact with the GSMA authentication panel. This issue is fixed in iOS 15.4 and iPadOS 15.4. A pe...Show more The GSMA authentication panel could be presented on the lock screen. The issue was resolved by requiring device unlock to interact with the GSMA authentication panel. This issue is fixed in iOS 15.4 and iPadOS 15.4. A person with physical access may be able to view and modify the carrier account information and settings from the lock screen.Show less

Previous 1...150151152...460 Next