Apple Security Update 2022-003 Catalina vulnerabilities

CVE-2022-22661 [HIGH] CVE-2022-22661: Security Update 2022-003 Catalina Apple Security Update: About the security content of Security Update 2022-003 Catalina Product: Security Update 2022-003 Catalina CVE: CVE-2022-22661 Component: Intel Graphics Driver Impact: An application may be able to execute arbitrary code with kernel privileges Description: A type confusion issue was addressed with improved state handling.

CVE-2022-46706 [HIGH] CVE-2022-46706: Security Update 2022-003 Catalina Apple Security Update: About the security content of Security Update 2022-003 Catalina Product: Security Update 2022-003 Catalina CVE: CVE-2022-46706 Component: Intel Graphics Driver Impact: An application may be able to execute arbitrary code with kernel privileges Description: A type confusion issue was addressed with improved state handling.

CVE-2022-22597 [HIGH] CVE-2022-22597: Security Update 2022-003 Catalina Apple Security Update: About the security content of Security Update 2022-003 Catalina Product: Security Update 2022-003 Catalina CVE: CVE-2022-22597 Component: AppleScript Impact: Processing a maliciously crafted file may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved validation.

CVE-2022-22626 [HIGH] CVE-2022-22626: Security Update 2022-003 Catalina Apple Security Update: About the security content of Security Update 2022-003 Catalina Product: Security Update 2022-003 Catalina CVE: CVE-2022-22626 Component: AppleScript Impact: Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2022-22625 [HIGH] CVE-2022-22625: Security Update 2022-003 Catalina Apple Security Update: About the security content of Security Update 2022-003 Catalina Product: Security Update 2022-003 Catalina CVE: CVE-2022-22625 Component: AppleScript Impact: Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory Description: An out-of-bounds read was addressed with improved input validation.

CVE-2022-22631 [HIGH] CVE-2022-22631: Security Update 2022-003 Catalina Apple Security Update: About the security content of Security Update 2022-003 Catalina Product: Security Update 2022-003 Catalina CVE: CVE-2022-22631 Component: AppleGraphicsControl Impact: An application may be able to gain elevated privileges Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2022-22615 [HIGH] CVE-2022-22615: Security Update 2022-003 Catalina Apple Security Update: About the security content of Security Update 2022-003 Catalina Product: Security Update 2022-003 Catalina CVE: CVE-2022-22615 Component: Kernel Impact: An application may be able to execute arbitrary code with kernel privileges Description: A use after free issue was addressed with improved memory management.

CVE-2022-22665 [HIGH] CVE-2022-22665: Security Update 2022-003 Catalina Apple Security Update: About the security content of Security Update 2022-003 Catalina Product: Security Update 2022-003 Catalina CVE: CVE-2022-22665 Component: AppKit Impact: A malicious application may be able to gain root privileges Description: A logic issue was addressed with improved validation.

CVE-2022-22617 [HIGH] CVE-2022-22617: Security Update 2022-003 Catalina Apple Security Update: About the security content of Security Update 2022-003 Catalina Product: Security Update 2022-003 Catalina CVE: CVE-2022-22617 Component: PackageKit Impact: An application may be able to gain elevated privileges Description: A logic issue was addressed with improved state management.

CVE-2022-22627 [HIGH] CVE-2022-22627: Security Update 2022-003 Catalina Apple Security Update: About the security content of Security Update 2022-003 Catalina Product: Security Update 2022-003 Catalina CVE: CVE-2022-22627 Component: AppleScript Impact: Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2022-22672 [HIGH] CVE-2022-22672: Security Update 2022-003 Catalina Apple Security Update: About the security content of Security Update 2022-003 Catalina Product: Security Update 2022-003 Catalina CVE: CVE-2022-22672 Component: MobileAccessoryUpdater Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved memory handling.

CVE-2022-22614 [HIGH] CVE-2022-22614: Security Update 2022-003 Catalina Apple Security Update: About the security content of Security Update 2022-003 Catalina Product: Security Update 2022-003 Catalina CVE: CVE-2022-22614 Component: Kernel Impact: An application may be able to execute arbitrary code with kernel privileges Description: A use after free issue was addressed with improved memory management.

CVE-2022-22613 [HIGH] CVE-2022-22613: Security Update 2022-003 Catalina Apple Security Update: About the security content of Security Update 2022-003 Catalina Product: Security Update 2022-003 Catalina CVE: CVE-2022-22613 Component: Kernel Impact: An application may be able to execute arbitrary code with kernel privileges Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2022-22638 [MEDIUM] CVE-2022-22638: Security Update 2022-003 Catalina Apple Security Update: About the security content of Security Update 2022-003 Catalina Product: Security Update 2022-003 Catalina CVE: CVE-2022-22638 Component: Kernel Impact: An attacker in a privileged position may be able to perform a denial of service attack Description: A null pointer dereference was addressed with improved validation.

CVE-2022-22582 [MEDIUM] CVE-2022-22582: Security Update 2022-003 Catalina Apple Security Update: About the security content of Security Update 2022-003 Catalina Product: Security Update 2022-003 Catalina CVE: CVE-2022-22582 Component: WebKit Impact: Processing maliciously crafted web content may disclose sensitive user information Description: A cookie management issue was addressed with improved state management.

CVE-2022-22589 [MEDIUM] CVE-2022-22589: Security Update 2022-003 Catalina Apple Security Update: About the security content of Security Update 2022-003 Catalina Product: Security Update 2022-003 Catalina CVE: CVE-2022-22589 Component: WebKit Impact: Processing a maliciously crafted mail message may lead to running arbitrary javascript Description: A validation issue was addressed with improved input sanitization.

CVE-2022-22662 [MEDIUM] CVE-2022-22662: Security Update 2022-003 Catalina Apple Security Update: About the security content of Security Update 2022-003 Catalina Product: Security Update 2022-003 Catalina CVE: CVE-2022-22662 Component: WebKit Impact: Processing maliciously crafted web content may disclose sensitive user information Description: A cookie management issue was addressed with improved state management.

CVE-2022-26688 [MEDIUM] CVE-2022-26688: Security Update 2022-003 Catalina Apple Security Update: About the security content of Security Update 2022-003 Catalina Product: Security Update 2022-003 Catalina CVE: CVE-2022-26688 Component: PackageKit Impact: A malicious app with root privileges may be able to modify the contents of system files Description: An issue in the handling of symlinks was addressed with improved validation.

CVE-2022-22648 [MEDIUM] CVE-2022-22648: Security Update 2022-003 Catalina Apple Security Update: About the security content of Security Update 2022-003 Catalina Product: Security Update 2022-003 Catalina CVE: CVE-2022-22648 Component: AppleScript Impact: An application may be able to read restricted memory Description: This issue was addressed with improved checks.

CVE-2022-22616 [MEDIUM] CVE-2022-22616: Security Update 2022-003 Catalina Apple Security Update: About the security content of Security Update 2022-003 Catalina Product: Security Update 2022-003 Catalina CVE: CVE-2022-22616 Component: BOM Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks Description: This issue was addressed with improved checks.