Vulnerabilities > Apple > Macos > 12.7

DATE CVE VULNERABILITY TITLE RISK
2022-11-01 CVE-2022-42823 Type Confusion vulnerability in multiple products
A type confusion issue was addressed with improved memory handling.
network
low complexity
apple fedoraproject debian CWE-843
8.8
2022-11-01 CVE-2022-42824 A logic issue was addressed with improved state management.
local
low complexity
apple fedoraproject debian
5.5
2022-11-01 CVE-2022-42825 Unspecified vulnerability in Apple products
This issue was addressed by removing additional entitlements.
local
low complexity
apple
5.5
2022-11-01 CVE-2022-42829 Use After Free vulnerability in Apple Macos
A use after free issue was addressed with improved memory management.
local
low complexity
apple CWE-416
6.7
2022-11-01 CVE-2022-42830 Unspecified vulnerability in Apple Macos
The issue was addressed with improved memory handling.
local
low complexity
apple
6.7
2022-11-01 CVE-2022-42831 Race Condition vulnerability in Apple Macos
A race condition was addressed with improved locking.
local
high complexity
apple CWE-362
6.4
2022-11-01 CVE-2022-42832 Race Condition vulnerability in Apple Macos
A race condition was addressed with improved locking.
local
high complexity
apple CWE-362
6.4
2022-09-29 CVE-2022-1725 NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959.
local
low complexity
vim apple
5.5
2022-07-07 CVE-2022-32205 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them.
4.3
2022-07-07 CVE-2022-32207 Incorrect Default Permissions vulnerability in multiple products
When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.
network
low complexity
haxx fedoraproject debian netapp apple splunk CWE-276
critical
9.8