Apple Multiple Products Type Confusion Vulnerability

概要

参考情報

• packetstormsecurity.com/files/161295/XNU-Kernel-Turnstiles-Type-Confusion.html · Third Party Advisory
• seclists.org/fulldisclosure/2020/Dec/32 · Mailing List
• support.apple.com/en-us/HT211928 · Vendor Advisory
• support.apple.com/en-us/HT211929 · Vendor Advisory
• support.apple.com/en-us/HT211931 · Vendor Advisory
• support.apple.com/en-us/HT211940 · Vendor Advisory
• support.apple.com/en-us/HT211944 · Vendor Advisory
• support.apple.com/en-us/HT211945 · Vendor Advisory
• support.apple.com/en-us/HT211946 · Vendor Advisory
• support.apple.com/en-us/HT211947 · Vendor Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2020-27932

icloud のその他の脆弱性

• CVE-2022-46698中 6.5A logic issue was addressed with improved checks. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1…
• CVE-2022-46693高 7.8An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in tvOS 16.2, iCloud for Windows 14.1, macOS …
• CVE-2022-46692中 5.5A logic issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, iOS 15.7…
• CVE-2020-36521高 7.1An out-of-bounds read was addressed with improved input validation. This issue is fixed in iCloud for Windows 11.4, iOS 14.0 and iPadOS 14.0…
• CVE-2018-4302高 7.8A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iCloud for Windows 7.0, w…