The SysDrv3S driver in the CODESYS Control runtime system on Microsoft Windows allows any system user to read and write within restricted memory space.

%PDF-1.5 %���� 1 0 obj <>>> endobj 2 0 obj <> endobj 3 0 obj <>/ExtGState<>/Font<>/ProcSet\[/PDF/Text/ImageB/ImageC/ImageI\] >>/MediaBox\[ 0 0 595.2 841.92\] /Contents 4 0 R/Group<>/Tabs/S/StructParents 0>> endobj 4 0 obj <> stream x��X�n�6�/@�pRD��H�$k�b)�u�"Pm���ؙ�t�#�-wI;�SG�ɳA��H�s/�=� �388�����h8������6M�LF��8g���t���8uVU���,�$tk\`��

CVE-2022-22516

TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the minAddress parameter.

Sorry, something went wrong. Reload?

Sorry, we cannot display this file.

Sorry, this file is invalid so it cannot be displayed.

CVE-2022-26640: Hardware-IoT/tp-link tl-wr840n_minAddress=.pdf at main · Quadron-Research-Lab/Hardware-IoT

TP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the DNSServers parameter.

CVE-2022-26639: Hardware-IoT/tp-link tl-wr840n_DNSServers=.pdf at main · Quadron-Research-Lab/Hardware-IoT

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename.

Skip to content

GitLab 

**Do not invoke commands through shell.**

*   Review changes
    

*   
*   Download
    
*   
*   

Executing shell commands through mechanisms such as os.system() or subprocess.run(shell=True) with user-controllable input is prone to arbitrary shell command injection. In this particular case, a malicious actor controlling any input name, either in PDF or image form, can force ocrfeeder to execute shell commands embedded in the file name. While a workaround for #20 (closed), mentioning problems opening files with special characters, was introduced in 5286120c, this was not applied to every subprocess invocation. Furthermore, it is good practice to make use of the parameterization of arguments available in the subprocess package instead of relying on character escaping alone, avoiding shell invocation completely. This minimizes the attack surface.

Fixes #82

CVE-2022-27811: Do not invoke commands through shell. (!13) · Merge requests · GNOME / ocrfeeder · GitLab

The Reporting module in Aseco Lietuva document management system DVS Avilys before 3.5.58 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading administrative files.

**Dokumentų ir procesų valdymo sistema „Avilys“****Mažiau popieriaus, daugiau tvarkos!**

Įsivaizduokite programinę įrangą, kuri leidžia centralizuotai kaupti visus organizacijoje sukuriamus bei gaunamus dokumentus, įgalina nepasimesti tarp skirtingų jų versijų ir redakcijų, elektroniniu būdu juos derinti, vizuoti ir pasirašyti, patvirtinti pasirašymą elektroniniu parašu, automatiškai nukreipti ir nusiųsti reikiamus elektroninius dokumentus jų adresatams.

Įsivaizduokite, kad ši programinė įranga kiekvienam darbuotojui padeda per daug trumpesnį laiką atlikti praktiškai visus su dokumentais susijusius veiksmus (parengti, redaguoti, išsaugoti, archyvuoti) ir leidžia sutaupyti dokumentų spausdinimui bei tvarkymui skirtas išlaidas.

Įsivaizduokite, kad darbuotojui nereikia žinoti, kas iš dokumentus derinančių asmenų atostogauja ir nusiųstus derinti dokumentus gali suderinti sistemoje įvestas pavaduojantis asmuo, o iš atostogų grįžęs kolega gali susipažinti su pavaduojančio asmens nuveiktais darbais.

Įsivaizduokite, kad dokumentus galima greitai surasti ir susipažinti su juose esančia informacija bet kuriuo metu, kai tai yra reikalinga, o dokumentais ir juose esančia informacija gali naudotis tik tie asmenys, kuriems jie skirti.

Įsivaizduokite, kad šia programine įranga paprasta naudotis, o ji suteikia galimybę atlikti įvairiapusę analizę.

**Visa tai ir dar daugiau atlikti padeda dokumentų ir procesų valdymo sistema „Avilys“.**

 

**Ugnė Klupšaitė**

Pardavimo projektų vadovė  
**+370 698 555 05**

 

*   Daugiau apie dokumentų valdymo sistemą
*   Turinio valdymo platforma „Avilys SDP“

Dokumentų valdymo sistema „Avilys“ padeda įvairaus dydžio viešojo sektoriaus bei verslo organizacijoms atlikti šias funkcijas: saugoti ir archyvuoti dokumentus, registruoti ir nukreipti dokumentus, rengti ir derinti dokumentų projektus bei sutartis, valdyti užduotis, projektus, resursus, pirkimus ir konsultacijų teikimą, organizuoti posėdžius, teikti elektronines paslaugas, o taip pat grafiškai modeliuoti dokumentų rengimo procesus. „Avilyje“ yra galimybė pasirašyti dokumentus el. parašu pagal Lietuvos archyvų departamento patvirtintus reikalavimus ir patogiai priimti, registruoti bei perskaityti elektroninius dokumentus ADOC ir PDF formatais. Sistemos naudotojai prie sistemos jungiasi per interneto naršyklę. Sistemoje „Avilys“ naudojami įrankiai - atvirojo kodo (Open Source) programinė įranga bei paplitusios duomenų bazių valdymo sistemos tokios, kaip „Oracle", „PostgreSQL".

DVS „Avilys“ gali būti naudojama kaip:

*   savarankiška sistema, padedanti valdyti visą organizacijos dokumentų gyvavimo ciklą - nuo dokumentų sukūrimo iki archyvavimo;
*    į pagrindines organizacijos sistemas integruota „backend“ sistema, padedanti šioms sistemoms atlikti dokumentų valdymo funkciją;
*   organizacijos turinio valdymo platforma, skirta kurti specializuotas taikomąsias programas.

**„Avilys“ - tai:**

 

*   Centralizuotas dokumentų saugojimas ir archyvavimas
*   Dokumentų valdymas
*   Užduočių valdymas
*   Sutarčių valdymas
*   Posėdžių organizavimas
*   Teisės aktų valdymas
*   Pirkimų informacijos valdymas

 

 

*   Konsultacijų valdymas
*   Resursų valdymas
*   Projektų valdymas
*   Elektroninių paslaugų valdymas
*   Periodinės priminimų ataskaitos
*   Lanksčios ir sklandžios integravimo galimybės

 

** DVS „Avilys“ privalumai:**

****

*   El. dokumentų ir el. parašo funkcionalumas (pasirašymas naudojant mobilų ar lokalų įrenginį, Smart-ID priemonę)
*   Išorinio pasirašymo funkcionalumas ("Avilyje" paruoštas dvišalis ADOC ar PDF dokumentas siunčiamas pasirašyti kitai šaliai per nuorodą į išorinę svetainę ir pasirašytas dokumentas automatiškai įsikelia "Avilyje")
*   Pavadavimas ir dokumentų perdavimas
*   Centralizuotas saugojimas ir archyvavimas
*   Automatizuoti derinimo, vizavimo, pasirašymo ir tvirtinimo procesai
*   Masiniai veiksmai su dokumentais (masinis skenavimas, nukreipimas, susiejimas, vizavimas ir pasirašymas, įkėlimas į sistemą, užduočių skyrimas ir uždarymas, duomenų keitimas)
*   Grafinis vidinių procesų modeliavimas (procesų šablonai, drag-and-drop principas)
*   Veiksmų istorija ir versijų atsekamumas
*   Pilnatekstė dokumentų paieška, paieškos rezultatų eksportas, personalizuotos paieškos
*   Optinio simbolių atpažinimo (OCR) galimybė
*   Automatinis turinio failų formato konvertavimas
*   Lanksčios integravimo su išorinėmis sistemomis galimybės (e. pristatymo sistema, personalo ir finansų valdymo sistemomis, teisės aktų registru, el. archyvo informacine sistema, kt.)
*   Ataskaitos (ataskaitų ruošiniai, įvairūs ataskaitų formatai, periodinės ataskaitos el. paštu)
*   Daugiaplatformė architektūra
*   Paprastas sistemos administravimas
*   Sistemos veikimo stebėsenos įrankis
*   Sustiprintas saugumas (dokumentų viešumo ir naudotojų slaptumo lygiai, organizacijos padalinių ir darbuotojų matomumo ribojimas, įspėjimai apie įslaptintų dokumentų eksportavimą)

**Pagrindiniai moduliai:**

**Centralizuotas dokumentų saugojimas ir archyvavimas**

*   Dokumentų saugojimas vienoje vietoje
*   Senų duomenų archyvavimas
*   Neaktualių archyvuotų duomenų šalinimas
*   Ataskaitos
*   Įvairios paieškos galimybės

 

**Dokumentų valdymas**

*   Gaunamų, siunčiamų bei vidaus dokumentų registravimas
*   Dokumentų klasifikavimas
*   Dokumentų rengimas, derinimas, vizavimas, pasirašymas ir tvirtinimas
*   Ruošiniai dokumentams rengti
*   Sudėtingų ir didelės apimtis dokumentų rengimas (grupinis darbas)
*   Dokumentų susiejimas
*   Optinis simbolių atpažinimas (OCR)
*   Automatinio registracijos spaudo funkcija
*   Tiesioginis skenavimas, įkėlimas iš el. laiško

 

**Užduočių valdymas**

*   Užduočių skyrimas
*   Pavadavimas (darbų perdavimas pavaduojančiam kolegai)
*   Užduočių vykdymo kontrolė
*   Tarpiniai užduoties vykdymo rezultatai
*   Priminimai ir įspėjimai
*   Galimybė automatiškai uždaryti užduotį

 

**Sutarčių valdymas**

*   Sutarčių rengimas, derinimas, vizavimas ir pasirašymas
*   Ruošiniai sutartims ruošti
*   Sutarčių ir kitų dokumentų susiejimas
*   Sutarties etapų valdymas
*   Sutarties vertės, datos, būsenos
*   Priminimai
*   Versijų atsekamumas
*   Veiksmų istorija
*   Proceso seka (automatizavimas)

 

**Posėdžių organizavimas**

*   Svarstytinų klausimų pateikimas
*   Darbotvarkės sudarymas ir derinimas
*   Dalyvių pakvietimas ir supažindinimas su posėdžio informacija
*   Posėdžio protokolavimas

 

**Elektroninių paslaugų valdymas**

*   Paslaugų aprašymų valdymas ir publikavimas
*   Informacijos, susijusios su paslaugų teikimu, publikavimas
*   Paslaugų paraiškų duomenų perdavimas į DVS vykdymui
*   Paslaugos vykdymo būsenos pateikimas iš DVS paslaugos gavėjui
*   Paslaugos įvykdymo rezultatų iš DVS pateikimas

 

**Kiti funkcionalumai:**

*   El. dokumentai ir el. parašas (el. dokumentų priėmimas, tikrinimas ir registravimas, rengimas, derinimas ir pasirašymas el. parašu)
*   Išorinis pasirašymas (dvišalių ADOC ar PDF dokumentų, pvz. sutarčių ir jos priedų, pasirašymas el. parašu)
*   Periodinės priminimų ataskaitos (apie neįvykdytas užduotis, kt.)
*   Pirkimų informacijos valdymas (pirkimo paraiškos rengimas ir derinimas)
*   Resursų valdymas (posėdžių salių, automobilių, konferencijų įrangos, kt.)
*   Projektų valdymas (projekto registravimas, dokumentų susiejimas, užduoties skyrimas projekto komandai)
*   Konsultacijų valdymas (informacijos apie konsultacijas administravimas ir konsultacijų teikimas, konsultacijų užsakymas)
*   Teisės aktų valdymas (rengimas, derinimas, publikavimas)

**Klientai:**

 

*   Ignalinos atominė elektrinė
*   Lietuvos bankas
*   Vilniaus, Klaipėdos, Panevėžio, Alytaus, Šiaulių miestų savivaldybės
*   Biržų, Pakruojo, Šiaulių, Zarasų rajonų savivaldybės
*   LR Vyriausybės kanceliarija
*   LR krašto apsaugos ministerija
*   LR susisiekimo ministerija
*   LR teisingumo ministerija
*   LR užsienio reikalų ministerija
*   LR vidaus reikalų ministerija
*   Policijos departamentas
*   Informacinės visuomenės plėtros komitetas
*   Lietuvos Respublikos transporto priemonių draudikų biuras
*   Klaipėdos valstybinio jūrų uosto direkcija

 

 

*   Lietuvos nacionalinė M. Mažvydo biblioteka ir kelios viešosios bibliotekos
*   Lietuvos vyriausiojo archyvaro tarnyba
*   Vilniaus universitetas
*   Kultūros paveldo departamentas
*   Nacionalinis muziejus Lietuvos Didžiosios kunigaikštystės valdovų rūmai
*   Nacionalinė žemės tarnyba
*   Valstybinė geležinkelio inspekcija
*   Lietuvos transporto saugos administracija
*   Valstybinė mokesčių inspekcija
*   Valstybinė teritorijų planavimo ir statybos inspekcija
*   Valstybinis patentų biuras
*   Žemės ūkio informacijos ir kaimo verslo centras
*   „Akropolis group"

 

„Avilys SDP“ - tai turinio valdymo (ECM) platforma, kuri apima metodus ir įrankius, naudojamus užfiksuoti, valdyti, įrašyti, išsaugoti ir pateikti informaciją, dokumentus ir duomenis, susijusius su organizacijos veiklos procesais, bei kurios pagalba galima konfigūruoti ir kurti naujus modulius bei taikomąsias programas įvairiems su organizacijos veiklos procesais susijusiems funkcionalumams įgyvendinti.

Daugiau informacijos meniu „Sprendimai“ skiltyje „Turinio valdymas“.

CVE-2022-27192: DVS Avilys

The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointer dereference.

%PDF-1.7 %���� 1 0 obj <>/Metadata 152 0 R/ViewerPreferences 153 0 R>> endobj 2 0 obj <> endobj 3 0 obj <>/ExtGState<>/ProcSet\[/PDF/Text/ImageB/ImageC/ImageI\] >>/Annots\[ 20 0 R 23 0 R 24 0 R 25 0 R 26 0 R 27 0 R\] /MediaBox\[ 0 0 612 792\] /Contents 4 0 R/Group<>/Tabs/S/StructParents 0>> endobj 4 0 obj <> stream x��\\Ys�F~W������+�\*���l��Z����%�R�����ow�x v�d������tܼ�������o��u�Ûq��+2��p����(�:����\`y}�Ç뫛�<\*�0���@�D"dp�$Q�a��~��,x������˯?^\_��=cR��dL��� >�������뫳��B���2A�5 ���^ �0�av:�Θ��G����H����G����J�LI���2%c�d�R0��=2#� 푐F&^K�\[�y=���kb%\*Y���w���\`�n��v+�T�%�A0�Ë��y��6���ߧ��:�Ԡ�Gr��e��I�ҷ�j=T�<�͊@��.Vn7�\\���H�)�e��6����� �����\`2��pd����{�U3����viM��5$abZ�&E����X} Fޡ6�,J�f0{u��Z�< ����\_�# &�)�?����Ј.��Y(;����3��𴕭 �p��p.t�a�� /���aa�5� ��c���cƝZ�/ e�u��:ї�ۗ��0�8�/\]��("�(�:O-\\p����>���Y��Kn��y��\`��)�N�ɉ�mؙ�i�ױF/;\\���J�hU�"��Ң��&���ϓ5~�z��ِ���D.N�aN�KY�fAk\`�����,r���A1L\`�����.a�Œ9G\_ԃŐ��gX��<@QN��3 nZ,A��z����\*��s��mR�$$��IeKʎ��aIt��mp�+�Ǒn�Š�H �'!A��\`�(Ii�$jL��ǔ��� LA ����' T��

CVE-2021-45117

A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to gain root privileges.

Released March 14, 2022

**Accelerate Framework**

Available for: macOS Monterey

Impact: Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution

Description: A memory corruption issue was addressed with improved state management.

CVE-2022-22633: an anonymous researcher

**AMD**

Available for: macOS Monterey

Impact: An application may be able to execute arbitrary code with kernel privileges

Description: A use after free issue was addressed with improved memory management.

CVE-2022-22669: an anonymous researcher

**AppKit**

Available for: macOS Monterey

Impact: A malicious application may be able to gain root privileges

Description: A logic issue was addressed with improved validation.

CVE-2022-22665: Lockheed Martin Red Team

**AppleGraphicsControl**

Available for: macOS Monterey

Impact: An application may be able to gain elevated privileges

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2022-22631: an anonymous researcher

**AppleScript**

Available for: macOS Monterey

Impact: Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory

Description: An out-of-bounds read was addressed with improved input validation.

CVE-2022-22625: Mickey Jin (@patch1t) of Trend Micro

**AppleScript**

Available for: macOS Monterey

Impact: An application may be able to read restricted memory

Description: This issue was addressed with improved checks.

CVE-2022-22648: an anonymous researcher

**AppleScript**

Available for: macOS Monterey

Impact: Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2022-22626: Mickey Jin (@patch1t) of Trend Micro

CVE-2022-22627: Qi Sun and Robert Ai of Trend Micro

**AppleScript**

Available for: macOS Monterey

Impact: Processing a maliciously crafted file may lead to arbitrary code execution

Description: A memory corruption issue was addressed with improved validation.

CVE-2022-22597: Qi Sun and Robert Ai of Trend Micro

**BOM**

Available for: macOS Monterey

Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks

Description: This issue was addressed with improved checks.

CVE-2022-22616: Ferdous Saljooki (@malwarezoo) and Jaron Bradley (@jbradley89) of Jamf Software, Mickey Jin (@patch1t)

**curl**

Available for: macOS Monterey

Impact: Multiple issues in curl

Description: Multiple issues were addressed by updating to curl version 7.79.1.

CVE-2021-22946

CVE-2021-22947

CVE-2021-22945

Entry updated March 21, 2022

**FaceTime**

Available for: macOS Monterey

Impact: A user may send audio and video in a FaceTime call without knowing that they have done so

Description: This issue was addressed with improved checks.

CVE-2022-22643: Sonali Luthar of the University of Virginia, Michael Liao of the University of Illinois at Urbana-Champaign, Rohan Pahwa of Rutgers University, and Bao Nguyen of the University of Florida

**ImageIO**

Available for: macOS Monterey

Impact: Processing a maliciously crafted image may lead to arbitrary code execution

Description: An out-of-bounds read was addressed with improved input validation.

CVE-2022-22611: Xingyu Jin of Google

**ImageIO**

Available for: macOS Monterey

Impact: Processing a maliciously crafted image may lead to heap corruption

Description: A memory consumption issue was addressed with improved memory handling.

CVE-2022-22612: Xingyu Jin of Google

**Intel Graphics Driver**

Available for: macOS Monterey

Impact: An application may be able to execute arbitrary code with kernel privileges

Description: A type confusion issue was addressed with improved state handling.

CVE-2022-22661: an anonymous researcher, Peterpan0927 of Alibaba Security Pandora Lab

**IOGPUFamily**

Available for: macOS Monterey

Impact: An application may be able to gain elevated privileges

Description: A use after free issue was addressed with improved memory management.

CVE-2022-22641: Mohamed Ghannam (@\_simo36)

**Kernel**

Available for: macOS Monterey

Impact: An application may be able to execute arbitrary code with kernel privileges

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2022-22613: Alex, an anonymous researcher

**Kernel**

Available for: macOS Monterey

Impact: An application may be able to execute arbitrary code with kernel privileges

Description: A use after free issue was addressed with improved memory management.

CVE-2022-22614: an anonymous researcher

CVE-2022-22615: an anonymous researcher

**Kernel**

Available for: macOS Monterey

Impact: A malicious application may be able to elevate privileges

Description: A logic issue was addressed with improved state management.

CVE-2022-22632: Keegan Saunders

**Kernel**

Available for: macOS Monterey

Impact: An attacker in a privileged position may be able to perform a denial of service attack

Description: A null pointer dereference was addressed with improved validation.

CVE-2022-22638: derrek (@derrekr6)

**Kernel**

Available for: macOS Monterey

Impact: An application may be able to execute arbitrary code with kernel privileges

Description: A memory corruption issue was addressed with improved validation.

CVE-2022-22640: sqrtpwn

**libarchive**

Available for: macOS Monterey

Impact: Multiple issues in libarchive

Description: Multiple memory corruption issues existed in libarchive. These issues were addressed with improved input validation.

CVE-2021-36976

**Login Window**

Available for: macOS Monterey

Impact: A person with access to a Mac may be able to bypass Login Window

Description: This issue was addressed with improved checks.

CVE-2022-22647: an anonymous researcher

**LoginWindow**

Available for: macOS Monterey

Impact: A local attacker may be able to view the previous logged in user’s desktop from the fast user switching screen

Description: An authentication issue was addressed with improved state management.

CVE-2022-22656

**GarageBand MIDI**

Available for: macOS Monterey

Impact: Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution

Description: A memory initialization issue was addressed with improved memory handling.

CVE-2022-22657: Brandon Perry of Atredis Partners

**GarageBand MIDI**

Available for: macOS Monterey

Impact: Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2022-22664: Brandon Perry of Atredis Partners

**NSSpellChecker**

Available for: macOS Monterey

Impact: A malicious application may be able to access information about a user's contacts

Description: A privacy issue existed in the handling of Contact cards. This was addressed with improved state management.

CVE-2022-22644: an anonymous researcher

**PackageKit**

Available for: macOS Monterey

Impact: An application may be able to gain elevated privileges

Description: A logic issue was addressed with improved state management.

CVE-2022-22617: Mickey Jin (@patch1t)

**Preferences**

Available for: macOS Monterey

Impact: A malicious application may be able to read other applications' settings

Description: The issue was addressed with additional permissions checks.

CVE-2022-22609: Zhipeng Huo (@R3dF09) and Yuebin Sun (@yuebinsun2020) of Tencent Security Xuanwu Lab (xlab.tencent.com)

**QuickTime Player**

Available for: macOS Monterey

Impact: A plug-in may be able to inherit the application's permissions and access user data

Description: This issue was addressed with improved checks.

CVE-2022-22650: Wojciech Reguła (@\_r3ggi) of SecuRing

**Safari Downloads**

Available for: macOS Monterey

Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks

Description: This issue was addressed with improved checks.

CVE-2022-22616: Ferdous Saljooki (@malwarezoo) and Jaron Bradley (@jbradley89) of Jamf Software, Mickey Jin (@patch1t)

**Sandbox**

Available for: macOS Monterey

Impact: A malicious application may be able to bypass certain Privacy preferences

Description: The issue was addressed with improved permissions logic.

CVE-2022-22600: Sudhakar Muthumani of Primefort Private Limited, Khiem Tran

**Siri**

Available for: macOS Monterey

Impact: A person with physical access to a device may be able to use Siri to obtain some location information from the lock screen

Description: A permissions issue was addressed with improved validation.

CVE-2022-22599: Andrew Goldberg of the University of Texas at Austin, McCombs School of Business (linkedin.com/andrew-goldberg/)

**SMB**

Available for: macOS Monterey

Impact: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2022-22651: Felix Poulin-Belanger

**SoftwareUpdate**

Available for: macOS Monterey

Impact: An application may be able to gain elevated privileges

Description: A logic issue was addressed with improved state management.

CVE-2022-22639: Mickey Jin (@patch1t)

**System Preferences**

Available for: macOS Monterey

Impact: An app may be able to spoof system notifications and UI

Description: This issue was addressed with a new entitlement.

CVE-2022-22660: Guilherme Rambo of Best Buddy Apps (rambo.codes)

**UIKit**

Available for: macOS Monterey

Impact: A person with physical access to an iOS device may be able to see sensitive information via keyboard suggestions

Description: This issue was addressed with improved checks.

CVE-2022-22621: Joey Hewitt

**Vim**

Available for: macOS Monterey

Impact: Multiple issues in Vim

Description: Multiple issues were addressed by updating Vim.

CVE-2021-4136

CVE-2021-4166

CVE-2021-4173

CVE-2021-4187

CVE-2021-4192

CVE-2021-4193

CVE-2021-46059

CVE-2022-0128

CVE-2022-0156

CVE-2022-0158

**VoiceOver**

Available for: macOS Monterey

Impact: A user may be able to view restricted content from the lock screen

Description: A lock screen issue was addressed with improved state management.

CVE-2021-30918: an anonymous researcher

**WebKit**

Available for: macOS Monterey

Impact: Processing maliciously crafted web content may disclose sensitive user information

Description: A cookie management issue was addressed with improved state management.

WebKit Bugzilla: 232748  
CVE-2022-22662: Prakash (@1lastBr3ath) of Threat Nix

**WebKit**

Available for: macOS Monterey

Impact: Processing maliciously crafted web content may lead to code execution

Description: A memory corruption issue was addressed with improved state management.

WebKit Bugzilla: 232812  
CVE-2022-22610: Quan Yin of Bigo Technology Live Client Team

**WebKit**

Available for: macOS Monterey

Impact: Processing maliciously crafted web content may lead to arbitrary code execution

Description: A use after free issue was addressed with improved memory management.

WebKit Bugzilla: 233172  
CVE-2022-22624: Kirin (@Pwnrin) of Tencent Security Xuanwu Lab

WebKit Bugzilla: 234147  
CVE-2022-22628: Kirin (@Pwnrin) of Tencent Security Xuanwu Lab

**WebKit**

Available for: macOS Monterey

Impact: Processing maliciously crafted web content may lead to arbitrary code execution

Description: A buffer overflow issue was addressed with improved memory handling.

WebKit Bugzilla: 234966  
CVE-2022-22629: Jeonghoon Shin at Theori working with Trend Micro Zero Day Initiative

**WebKit**

Available for: macOS Monterey

Impact: A malicious website may cause unexpected cross-origin behavior

Description: A logic issue was addressed with improved state management.

WebKit Bugzilla: 235294  
CVE-2022-22637: Tom McKee of Google

**Wi-Fi**

Available for: macOS Monterey

Impact: A malicious application may be able to leak sensitive user information

Description: A logic issue was addressed with improved restrictions.

CVE-2022-22668: MrPhil17

**xar**

Available for: macOS Monterey

Impact: A local user may be able to write arbitrary files

Description: A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks.

CVE-2022-22582: Richard Warren of NCC Group

CVE-2022-22665: About the security content of macOS Monterey 12.3

A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, macOS Monterey 12.3. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution.

Released March 14, 2022

**Accelerate Framework**

Available for: macOS Big Sur

Impact: Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution

Description: A memory corruption issue was addressed with improved state management.

CVE-2022-22633: ryuzaki

Entry updated May 25, 2022

**AppKit**

Available for: macOS Big Sur

Impact: A malicious application may be able to gain root privileges

Description: A logic issue was addressed with improved validation.

CVE-2022-22665: Lockheed Martin Red Team

Entry added May 25, 2022

**AppleGraphicsControl**

Available for: macOS Big Sur

Impact: An application may be able to gain elevated privileges

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2022-22631: Wang Yu of cyberserval

Entry updated May 25, 2022

**AppleScript**

Available for: macOS Big Sur

Impact: An application may be able to read restricted memory

Description: This issue was addressed with improved checks.

CVE-2022-22648: Mickey Jin (@patch1t) of Trend Micro

Entry updated May 25, 2022

**AppleScript**

Available for: macOS Big Sur

Impact: Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2022-22627: Qi Sun and Robert Ai of Trend Micro

CVE-2022-22626: Mickey Jin (@patch1t) of Trend Micro

**AppleScript**

Available for: macOS Big Sur

Impact: Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory

Description: An out-of-bounds read was addressed with improved input validation.

CVE-2022-22625: Mickey Jin (@patch1t) of Trend Micro

**AppleScript**

Available for: macOS Big Sur

Impact: Processing a maliciously crafted file may lead to arbitrary code execution

Description: A memory corruption issue was addressed with improved validation.

CVE-2022-22597: Qi Sun and Robert Ai of Trend Micro

**BOM**

Available for: macOS Big Sur

Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks

Description: This issue was addressed with improved checks.

CVE-2022-22616: Ferdous Saljooki (@malwarezoo) and Jaron Bradley (@jbradley89) of Jamf Software, Mickey Jin (@patch1t)

**CUPS**

Available for: macOS Big Sur

Impact: An application may be able to gain elevated privileges

Description: A logic issue was addressed with improved state management.

CVE-2022-26691: Joshua Mason of Mandiant

Entry added May 25, 2022

**Intel Graphics Driver**

Available for: macOS Big Sur

Impact: An application may be able to execute arbitrary code with kernel privileges

Description: A type confusion issue was addressed with improved state handling.

CVE-2022-22661: an anonymous researcher, Pan ZhenPeng (@Peterpan0927) of Alibaba Security Pandora Lab

Entry updated May 25, 2022

**Kernel**

Available for: macOS Big Sur

Impact: An application may be able to execute arbitrary code with kernel privileges

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2022-22613: Alex, an anonymous researcher

**Kernel**

Available for: macOS Big Sur

Impact: An application may be able to execute arbitrary code with kernel privileges

Description: A use after free issue was addressed with improved memory management.

CVE-2022-22615: an anonymous researcher

CVE-2022-22614: an anonymous researcher

**Kernel**

Available for: macOS Big Sur

Impact: An attacker in a privileged position may be able to perform a denial of service attack

Description: A null pointer dereference was addressed with improved validation.

CVE-2022-22638: derrek (@derrekr6)

**Kernel**

Available for: macOS Big Sur

Impact: A malicious application may be able to elevate privileges

Description: A logic issue was addressed with improved state management.

CVE-2022-22632: Keegan Saunders

**Login Window**

Available for: macOS Big Sur

Impact: A person with access to a Mac may be able to bypass Login Window

Description: This issue was addressed with improved checks.

CVE-2022-22647: Yuto Ikeda of Kyushu University

Entry updated May 25, 2022

**LoginWindow**

Available for: macOS Big Sur

Impact: A local attacker may be able to view the previous logged in user’s desktop from the fast user switching screen

Description: An authentication issue was addressed with improved state management.

CVE-2022-22656

**MobileAccessoryUpdater**

Available for: macOS Big Sur

Impact: A malicious application may be able to execute arbitrary code with kernel privileges

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2022-22672: Siddharth Aeri (@b1n4r1b01)

Entry added May 25, 2022

**PackageKit**

Available for: macOS Big Sur

Impact: An application may be able to gain elevated privileges

Description: A logic issue was addressed with improved state management.

CVE-2022-22617: Mickey Jin (@patch1t)

**PackageKit**

Available for: macOS Big Sur

Impact: A malicious app with root privileges may be able to modify the contents of system files

Description: An issue in the handling of symlinks was addressed with improved validation.

CVE-2022-26688: Mickey Jin (@patch1t) of Trend Micro

Entry added May 25, 2022

**QuickTime Player**

Available for: macOS Big Sur

Impact: A plug-in may be able to inherit the application's permissions and access user data

Description: This issue was addressed with improved checks.

CVE-2022-22650: Wojciech Reguła (@\_r3ggi) of SecuRing

**Siri**

Available for: macOS Big Sur

Impact: A person with physical access to a device may be able to use Siri to obtain some location information from the lock screen

Description: A permissions issue was addressed with improved validation.

CVE-2022-22599: Andrew Goldberg of the University of Texas at Austin, McCombs School of Business (linkedin.com/andrew-goldberg-/)

Entry updated May 25, 2022

**SMB**

Available for: macOS Big Sur

Impact: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2022-22651: Felix Poulin-Belanger

Entry added May 25, 2022

**WebKit**

Available for: macOS Big Sur

Impact: Processing maliciously crafted web content may disclose sensitive user information

Description: A cookie management issue was addressed with improved state management.

CVE-2022-22662: Prakash (@1lastBr3ath) of Threat Nix

Entry added May 25, 2022

**WebKit**

Available for: macOS Big Sur

Impact: Processing maliciously crafted web content may disclose sensitive user information

Description: A cookie management issue was addressed with improved state management.

WebKit Bugzilla: 232748  
CVE-2022-22662: Prakash (@1lastBr3ath) of Threat Nix

**xar**

Available for: macOS Big Sur

Impact: A local user may be able to write arbitrary files

Description: A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks.

CVE-2022-22582: Richard Warren of NCC Group

CVE-2022-22633: About the security content of macOS Big Sur 11.6.5

Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4.

@@ -54,10 +54,10 @@ public function deleteFile($file\_id){ }  
//上传文件，返回url public function upload($\_files , $file\_key , $uid , $item\_id = 0 , $page\_id = 0 ){ public function upload($\_files , $file\_key , $uid , $item\_id = 0 , $page\_id = 0 , $check\_filename = true ){ $uploadFile = $\_files\[$file\_key\] ;  
if( !$this\->isAllowedFilename($\_files\[$file\_key\]\['name'\]) ){ if( $check\_filename && !$this\->isAllowedFilename($\_files\[$file\_key\]\['name'\]) ){ return false; }  
@@ -324,14 +324,12 @@ public function isDangerFilename($filename){ public function isAllowedFilename($filename){ $allow\_array = array( '.jpg','.jpeg','.png','.bmp','.gif','.ico','.webp', '.mp3','.wav','.mp4', '.mov','.webmv','.flac','.mkv', '.mp3','.wav','.mp4','.mov','.flac','.mkv', '.zip','.tar','.gz','.tgz','.ipa','.apk','.rar','.iso', '.pdf','.ofd','.swf','.epub','.xps', '.doc','.docx','.wps', '.pdf','.epub','.xps','.doc','.docx','.wps', '.ppt','.pptx','.xls','.xlsx','.txt','.psd','.csv', '.cer','.ppt','.pub','.json','.css', ) ; ) ;  
$ext = strtolower(substr($filename,strripos($filename,'.')) ); //获取文件扩展名（转为小写后） if(in\_array( $ext , $allow\_array ) ){

CVE-2022-0967: Upload file vulnerability · star7th/showdoc@3caa323

An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted frame lengths from a device.

Tag

#pdf