12.5

DATE	CVE	VULNERABILITY TITLE	RISK
2022-10-29	CVE-2022-42915	Double Free vulnerability in multiple products curl before 7.86.0 has a double free. network high complexity haxx fedoraproject netapp apple splunk CWE-415	8.1
2022-10-29	CVE-2022-42916	Cleartext Transmission of Sensitive Information vulnerability in multiple products In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. network low complexity haxx fedoraproject apple splunk CWE-319	7.5
2022-09-29	CVE-2022-1725	NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959. local low complexity vim apple	5.5
2022-09-23	CVE-2022-35252	When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. network high complexity haxx netapp apple debian splunk	3.7
2022-09-20	CVE-2022-32864	Unspecified vulnerability in Apple products The issue was addressed with improved memory handling. local low complexity apple	5.5
2022-09-20	CVE-2022-32883	Unspecified vulnerability in Apple products A logic issue was addressed with improved restrictions. local low complexity apple	5.5
2022-09-20	CVE-2022-32908	Out-of-bounds Write vulnerability in Apple products A memory corruption issue was addressed with improved input validation. local low complexity apple CWE-787	7.8
2022-09-20	CVE-2022-32911	Unspecified vulnerability in Apple products The issue was addressed with improved memory handling. local low complexity apple	7.8
2022-09-20	CVE-2022-32917	Out-of-bounds Write vulnerability in Apple Ipados and Iphone OS The issue was addressed with improved bounds checks. local low complexity apple CWE-787	7.8
2022-08-24	CVE-2022-32893	Out-of-bounds Write vulnerability in multiple products An out-of-bounds write issue was addressed with improved bounds checking. network low complexity apple fedoraproject debian webkitgtk wpewebkit CWE-787	8.8