Free Trial

CVE-2022-42801 : APPLE IOS/IPADOS KERNEL LOCAL PRIVILEGE ESCALATION

Description

A logic issue was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1. An app may be able to execute arbitrary code with kernel privileges.

References

https://support.apple.com/en-us/HT213488

https://support.apple.com/en-us/HT213489

https://support.apple.com/en-us/HT213490

https://support.apple.com/en-us/HT213491

https://support.apple.com/en-us/HT213492

https://support.apple.com/en-us/HT213494

For More Information

MITRE

Common Vulnerabilityies and Exposures

CVE-2022-42801 : APPLE IOS/IPADOS KERNEL LOCAL PRIVILEGE ESCALATION
CVE-2022-42801 : APPLE IOS/IPADOS KERNEL LOCAL PRIVILEGE ESCALATION

Contact us to get started

CVE-2023-4291 : Frauscher Sensortechnik FDS101 For FAdC 1.4.24 Code Injection

CVE-2023-4291 : Frauscher Sensortechnik FDS101 For FAdC 1.4.24 Code Injection

Description Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a remote code execution (RCE)

Learn more
CVE-2023-2163 : Linux Kernel 5.4 BPF kernel/bpf/verifier.c backtrack_insn calculation

CVE-2023-2163 : Linux Kernel 5.4 BPF kernel/bpf/verifier.c backtrack_insn calculation

Description Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe,

Learn more
CVE-2023-42454 : SQLpage Up To 0.11.0 Database Connection String sqlpage/sqlpage.json Information Disclosure

CVE-2023-42454 : SQLpage Up To 0.11.0 Database Connection String sqlpage/sqlpage.json Information Disclosure

Description SQLpage is a SQL-only webapp builder. Someone using SQLpage versions prior to 0.11.1, whose SQLpage instance is exposed publicly,

Learn more