Latest CVE Feed
-
7.8
HIGHCVE-2022-32914
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, watchOS 9, macOS Monterey 12.6, tvOS 16. An app may be able to execute arbitrary code with kernel privileges.... Read more
- EPSS Score: %0.11
- Published: Nov. 01, 2022
- Modified: May. 06, 2025
-
3.3
LOWCVE-2022-32913
The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, watchOS 9, macOS Monterey 12.6, tvOS 16. A sandboxed app may be able to determine which app is cu... Read more
- EPSS Score: %0.05
- Published: Nov. 01, 2022
- Modified: May. 06, 2025
-
7.8
HIGHCVE-2022-32907
This issue was addressed with improved checks. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to execute arbitrary code with kernel privileges.... Read more
- EPSS Score: %0.15
- Published: Nov. 01, 2022
- Modified: May. 06, 2025
-
7.8
HIGHCVE-2022-32905
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted DMG file may lead to arbitrary code execution with system privileges.... Read more
Affected Products : macos- EPSS Score: %0.05
- Published: Nov. 01, 2022
- Modified: May. 06, 2025
-
5.5
MEDIUMCVE-2022-32904
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. An app may be able to access user-sensitive data.... Read more
Affected Products : macos- EPSS Score: %0.06
- Published: Nov. 01, 2022
- Modified: May. 06, 2025
-
2.4
LOWCVE-2022-32867
This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS Ventura 13. A user with physical access to an iOS device may be able to read past diagnostic logs.... Read more
- EPSS Score: %0.10
- Published: Nov. 01, 2022
- Modified: May. 06, 2025
-
7.8
HIGHCVE-2022-32866
The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, watchOS 9, macOS Monterey 12.6, tvOS 16. An app may be able to execute arbitrary code with kernel privileges.... Read more
- EPSS Score: %0.08
- Published: Nov. 01, 2022
- Modified: May. 06, 2025
-
7.8
HIGHCVE-2022-32865
The issue was addressed with improved memory handling. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.... Read more
- EPSS Score: %0.08
- Published: Nov. 01, 2022
- Modified: May. 06, 2025
-
5.5
MEDIUMCVE-2022-32862
This issue was addressed with improved data protection. This issue is fixed in macOS Big Sur 11.7.1, macOS Ventura 13, macOS Monterey 12.6.1. An app with root privileges may be able to access private information.... Read more
Affected Products : macos- EPSS Score: %1.05
- Published: Nov. 01, 2022
- Modified: May. 06, 2025
-
5.3
MEDIUMCVE-2022-32859
A logic issue was addressed with improved state management. This issue is fixed in iOS 16. Deleted contacts may still appear in spotlight search results.... Read more
Affected Products : iphone_os- EPSS Score: %0.20
- Published: Nov. 01, 2022
- Modified: May. 06, 2025
-
5.5
MEDIUMCVE-2022-32858
The issue was addressed with improved memory handling. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. An app may be able to leak sensitive kernel state.... Read more
- EPSS Score: %0.06
- Published: Nov. 01, 2022
- Modified: May. 06, 2025
-
3.3
LOWCVE-2022-32835
This issue was addressed with improved entitlements. This issue is fixed in iOS 16, watchOS 9. An app may be able to read a persistent device identifier.... Read more
- EPSS Score: %0.07
- Published: Nov. 01, 2022
- Modified: May. 06, 2025
-
5.5
MEDIUMCVE-2022-32827
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to cause a denial-of-service.... Read more
- EPSS Score: %0.08
- Published: Nov. 01, 2022
- Modified: May. 06, 2025
-
7.8
HIGHCVE-2022-32794
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. An app may be able to gain elevated privileges.... Read more
- EPSS Score: %0.10
- Published: Nov. 01, 2022
- Modified: May. 06, 2025
-
8.8
HIGHCVE-2022-26710
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, tvOS 15.5, watchOS 8.6. Processing maliciously crafted web content may lead to arbitrary code execution.... Read more
- EPSS Score: %0.18
- Published: Nov. 01, 2022
- Modified: May. 06, 2025
-
8.8
HIGHCVE-2022-26709
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code executio... Read more
- EPSS Score: %0.15
- Published: Nov. 01, 2022
- Modified: May. 06, 2025
-
4.3
MEDIUMCVE-2022-22677
A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. Video self-preview in a webRTC call may be interrupted if the user answers a phone call.... Read more
- EPSS Score: %0.11
- Published: Nov. 01, 2022
- Modified: May. 06, 2025
-
6.1
MEDIUMCVE-2018-19904
Persistent XSS exists in XSLT CMS via the create/?action=items.edit&type=Page "body" field.... Read more
Affected Products : xsltcms.org- EPSS Score: %0.24
- Published: Dec. 31, 2018
- Modified: May. 06, 2025
-
7.3
HIGHCVE-2025-28025
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter.... Read more
Affected Products : a830r_firmware a3100r_firmware a950rg_firmware a3000ru_firmware a3100r a3000ru a830r a950rg- Published: Apr. 23, 2025
- Modified: May. 06, 2025
- Vuln Type: Memory Corruption
-
7.3
HIGHCVE-2025-28028
TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v5 parameter.... Read more
Affected Products : a830r_firmware a3100r_firmware a950rg_firmware a3000ru_firmware a3100r a3000ru a830r a950rg- Published: Apr. 23, 2025
- Modified: May. 06, 2025
- Vuln Type: Memory Corruption