Jinmo123

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 16.2 iPadOS versions prior to 16.2 macOS Ventura versions prior to 13.1 **Description** An integer overflow issue was addressed through improved input validation, which could allow an app to break out of its sandbox. **Recommendations** For iOS versions prior to 16.2, update to iOS 16.2 or later. For iPadOS versions prior to 16.2, update to iPadOS 16.2 or later. For macOS Ventura versions prior to 13.1, update to macOS Ventura 13.1 or later.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 16.1 iOS versions prior to 16.1 iPadOS versions prior to 16 macOS Ventura versions prior to 13 **Description** A use after free issue was addressed with improved memory management. Processing maliciously crafted web content may lead to arbitrary code execution. **Recommendations** For Safari versions prior to 16.1, update to Safari 16.1 or later. For iOS versions prior to 16.1, update to iOS 16.1 or later. For iPadOS versions prior to 16, update to iPadOS 16 or later. For macOS Ventura versions prior to 13, update to macOS Ventura 13 or later.

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge (Chromium-based) (affected versions not specified) **Description** A security feature bypass issue exists in Microsoft Edge (Chromium-based). Additionally, a heap-based buffer overflow may allow a remote attacker to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to macOS Monterey 12.4 macOS versions prior to macOS Big Sur 11.6.6 macOS Catalina versions prior to Security Update 2022-004 **Description** A memory initialization issue was addressed, which may allow a malicious application to gain root privileges. **Recommendations** For macOS Catalina, apply Security Update 2022-004 to resolve the issue. For macOS Big Sur, update to version 11.6.6 to resolve the issue. For macOS Monterey, update to version 12.4 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Monterey 12.4 macOS versions prior to Big Sur 11.6.6 macOS Catalina versions prior to Security Update 2022-004 **Description** A memory initialization issue was addressed, which may allow a malicious application to gain root privileges. **Recommendations** For macOS Catalina, apply Security Update 2022-004 to resolve the issue. For macOS Big Sur, update to version 11.6.6 or later to resolve the issue. For macOS Monterey, update to version 12.4 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 96.0.4664.45 **Description** The issue is related to a type confusion in the V8 JavaScript engine, which can lead to heap corruption. A remote attacker can potentially exploit this issue via a crafted HTML page, allowing them to disclose protected information. **Recommendations** For versions prior to 96.0.4664.45, update to version 96.0.4664.45 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 94.0.4606.81 Description: The issue is related to an inappropriate implementation in the Sandbox feature of Google Chrome, which could allow a remote attacker to potentially bypass site isolation via Windows. Recommendations: For Google Chrome versions prior to 94.0.4606.81, update to version 94.0.4606.81 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.15.6 **Description** A local user may be able to load unsigned kernel extensions due to a time-of-check time-of-use memory corruption issue. This could potentially allow for unauthorized kernel extension loading. **Recommendations** For versions prior to 10.15.6, update to macOS Catalina 10.15.6 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.15.5 **Description** The issue allows an application to potentially gain elevated privileges due to a heap-based buffer overflow vulnerability in the Core Virtual Machine Service. This vulnerability was demonstrated in a real-world scenario at Pwn2Own. **Recommendations** For versions prior to 10.15.5, update to macOS Catalina 10.15.5 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.15.5 iOS versions prior to 13.5 iPadOS versions prior to 13.5 tvOS versions prior to 13.4.5 watchOS versions prior to 6.2.5 **Description** A race condition was addressed with improved state handling, which may allow an application to gain elevated privileges. This issue was exploited in real-world incidents, such as the Pwn2Own event, where a Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability was demonstrated in Apple macOS. **Recommendations** For macOS versions prior to 10.15.5, update to macOS 10.15.5 or later. For iOS versions prior to 13.5, update to iOS 13.5 or later. For iPadOS versions prior to 13.5, update to iPadOS 13.5 or later. For tvOS versions prior to 13.4.5, update to tvOS 13.4.5 or later. For watchOS versions prior to 6.2.5, update to watchOS 6.2.5 or later.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 13.1.1 **Description** A logic issue was addressed with improved restrictions, which may allow a malicious process to cause Safari to launch an application. **Recommendations** For versions prior to 13.1.1, update to Safari 13.1.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 13.1.1 iOS versions prior to 13.5 iPadOS versions prior to 13.5 tvOS versions prior to 13.4.5 watchOS versions prior to 6.2.5 iTunes for Windows version prior to 12.10.7 iCloud for Windows versions prior to 11.2 and 7.19 **Description** The issue is related to a logic problem in the WebKit module, which can be exploited by a remote attacker using malicious web content to execute arbitrary code. This is due to an incorrect implementation of the sequence of actions performed. A remote attacker may be able to cause arbitrary code execution. **Recommendations** For Safari version prior to 13.1.1, update to version 13.1.1 or later. For iOS version prior to 13.5, update to version 13.5 or later. For iPadOS version prior to 13.5, update to version 13.5 or later. For tvOS version prior to 13.4.5, update to version 13.4.5 or later. For watchOS version prior to 6.2.5, update to version 6.2.5 or later. For iTunes for Windows version prior to 12.10.7, update to version 12.10.7 or later. For iCloud for Windows versions prior to 11.2 and 7.19, update to version 11.2 or 7.19 or later.

**Name of the Vulnerable Software and Affected Versions** Keybase versions prior to 2.12.6 **Description** The issue in Keybase allows one user of the system without root access to tamper with another's installs due to time-to-check-time-to-use bugs in the move RPC to the Helper. **Recommendations** For versions prior to 2.12.6, update to version 2.12.6 or later to resolve the issue.