9.3

CVE-2022-26763

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A malicious application may be able to execute arbitrary code with system privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iPadOS Version < 15.5
Apple ≫ iPhone OS Version < 15.5
Apple ≫ macOS X Version < 10.15.7
Apple ≫ macOS X Version 10.15.7 Update -
Apple ≫ macOS X Version 10.15.7 Update security_update_2020-001
Apple ≫ macOS X Version 10.15.7 Update security_update_2021-001
Apple ≫ macOS X Version 10.15.7 Update security_update_2021-002
Apple ≫ macOS X Version 10.15.7 Update security_update_2021-003
Apple ≫ macOS X Version 10.15.7 Update security_update_2021-004
Apple ≫ macOS X Version 10.15.7 Update security_update_2021-005
Apple ≫ macOS X Version 10.15.7 Update security_update_2021-006
Apple ≫ macOS X Version 10.15.7 Update security_update_2021-007
Apple ≫ macOS X Version 10.15.7 Update security_update_2021-008
Apple ≫ macOS X Version 10.15.7 Update security_update_2022-001
Apple ≫ macOS X Version 10.15.7 Update security_update_2022-002
Apple ≫ macOS X Version 10.15.7 Update security_update_2022-003
Apple ≫ macOS Version >= 11.0 < 11.6.6
Apple ≫ macOS Version >= 12.0 < 12.4
Apple ≫ tvOS Version < 15.5
Apple ≫ watchOS Version < 8.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.67% 0.886
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CISA-ADP 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

https://support.apple.com/en-us/HT213255
Vendor Advisory
https://support.apple.com/en-us/HT213256
Vendor Advisory
https://support.apple.com/en-us/HT213258
Vendor Advisory
https://support.apple.com/en-us/HT213253
Vendor Advisory
https://support.apple.com/en-us/HT213254
Vendor Advisory
https://support.apple.com/en-us/HT213257
Vendor Advisory