Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
205 vulnerabilities found for N/A by Apple
CERTFR-2023-AVI-0119
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans les produits Apple. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, un contournement de la politique de sécurité et une exécution de code arbitraire à distance.
L'éditeur indique que la vulnérabilité CVE-2023-23529 est activement exploitée.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Apple macOS versions ant\u00e9rieures \u00e0 13.2.1",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Safari versions ant\u00e9rieures \u00e0 16.3.1",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS et iPadOS versions ant\u00e9rieures \u00e0 16.3.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2023-23514",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23514"
},
{
"name": "CVE-2023-23522",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23522"
},
{
"name": "CVE-2023-23529",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23529"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Apple du 13 f\u00e9vrier 2023",
"url": "https://support.apple.com/en-us/HT213633"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Apple du 13 f\u00e9vrier 2023",
"url": "https://support.apple.com/en-us/HT213638"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Apple du 13 f\u00e9vrier 2023",
"url": "https://support.apple.com/en-us/HT213635"
}
],
"reference": "CERTFR-2023-AVI-0119",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-02-14T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eles produits Apple\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, un\ncontournement de la politique de s\u00e9curit\u00e9 et une ex\u00e9cution de code\narbitraire \u00e0 distance.\n\nL\u0027\u00e9diteur indique que la vuln\u00e9rabilit\u00e9 CVE-2023-23529 est activement\nexploit\u00e9e.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213638 du 13 f\u00e9vrier 2023",
"url": null
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213635 du 13 f\u00e9vrier 2023",
"url": null
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213633 du 13 f\u00e9vrier 2023",
"url": null
}
]
}
CERTFR-2023-AVI-0056
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | N/A | iOS versions 16.x antérieures à 16.3 | ||
| Apple | macOS | macOS Monterey versions 12.x antérieures à 12.6.3 | ||
| Apple | macOS | macOS Ventura versions 13.x antérieures à 13.2 | ||
| Apple | N/A | iOS versions 15.x antérieures à 15.7.3 | ||
| Apple | N/A | iOS versions 12.x antérieures à 12.5.7 | ||
| Apple | Safari | Safari versions 16.x antérieures à 16.3 | ||
| Apple | macOS | macOS Big Sur versions 11.x antérieures à 11.7.3 | ||
| Apple | N/A | iPadOS versions 16.x antérieures à 16.3 | ||
| Apple | N/A | iPadOS versions 15.x antérieures à 15.7.3 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iOS versions 16.x ant\u00e9rieures \u00e0 16.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Monterey versions 12.x ant\u00e9rieures \u00e0 12.6.3",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Ventura versions 13.x ant\u00e9rieures \u00e0 13.2",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions 15.x ant\u00e9rieures \u00e0 15.7.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions 12.x ant\u00e9rieures \u00e0 12.5.7",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Safari versions 16.x ant\u00e9rieures \u00e0 16.3",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Big Sur versions 11.x ant\u00e9rieures \u00e0 11.7.3",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions 16.x ant\u00e9rieures \u00e0 16.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions 15.x ant\u00e9rieures \u00e0 15.7.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2023-23499",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23499"
},
{
"name": "CVE-2022-35252",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35252"
},
{
"name": "CVE-2022-35260",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35260"
},
{
"name": "CVE-2023-23513",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23513"
},
{
"name": "CVE-2023-23510",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23510"
},
{
"name": "CVE-2022-32915",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32915"
},
{
"name": "CVE-2022-42916",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42916"
},
{
"name": "CVE-2023-23497",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23497"
},
{
"name": "CVE-2022-3705",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3705"
},
{
"name": "CVE-2023-23504",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23504"
},
{
"name": "CVE-2022-42856",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42856"
},
{
"name": "CVE-2023-23498",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23498"
},
{
"name": "CVE-2023-23493",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23493"
},
{
"name": "CVE-2023-23501",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23501"
},
{
"name": "CVE-2023-23519",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23519"
},
{
"name": "CVE-2023-23500",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23500"
},
{
"name": "CVE-2022-42915",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42915"
},
{
"name": "CVE-2022-32221",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32221"
},
{
"name": "CVE-2023-23496",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23496"
},
{
"name": "CVE-2023-23518",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23518"
},
{
"name": "CVE-2023-23508",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23508"
},
{
"name": "CVE-2023-23502",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23502"
},
{
"name": "CVE-2023-23511",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23511"
},
{
"name": "CVE-2023-23505",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23505"
},
{
"name": "CVE-2023-23506",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23506"
},
{
"name": "CVE-2023-23517",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23517"
},
{
"name": "CVE-2023-23512",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23512"
},
{
"name": "CVE-2023-23507",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23507"
},
{
"name": "CVE-2023-23503",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23503"
}
],
"links": [],
"reference": "CERTFR-2023-AVI-0056",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-01-24T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance\net un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213600 du 23 janvier 2023",
"url": "https://support.apple.com/en-us/HT213600"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213606 du 23 janvier 2023",
"url": "https://support.apple.com/en-us/HT213606"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213603 du 23 janvier 2023",
"url": "https://support.apple.com/en-us/HT213603"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213605 du 23 janvier 2023",
"url": "https://support.apple.com/en-us/HT213605"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213597 du 23 janvier 2023",
"url": "https://support.apple.com/en-us/HT213597"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213598 du 23 janvier 2023",
"url": "https://support.apple.com/en-us/HT213598"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213604 du 23 janvier 2023",
"url": "https://support.apple.com/en-us/HT213604"
}
]
}
CERTFR-2022-AVI-1108
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un contournement de la politique de sécurité et une atteinte à l'intégrité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | N/A | tvOS versions antérieures à 16.2 | ||
| Apple | N/A | iPadOS versions antérieures à 16.2 | ||
| Apple | N/A | watchOS versions antérieures à 9.2 | ||
| Apple | N/A | iOS versions 15.x antérieures à 15.7.2 | ||
| Apple | N/A | iPadOS versions antérieures à 15.7.2 | ||
| Apple | macOS | macOS Big Sur versions 11.x antérieures à 11.7.2 | ||
| Apple | macOS | macOS Ventura versions 13.x antérieures à 13.1 | ||
| Apple | macOS | macOS Monterey versions 12.x antérieures à 12.6.2 | ||
| Apple | Safari | Safari versions antérieures à 16.2 | ||
| Apple | N/A | iOS versions 16.x antérieures à 16.2 | ||
| Apple | N/A | iCloud pour Windows versions antérieures à 14.1 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "tvOS versions ant\u00e9rieures \u00e0 16.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 16.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions ant\u00e9rieures \u00e0 9.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions 15.x ant\u00e9rieures \u00e0 15.7.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 15.7.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Big Sur versions 11.x ant\u00e9rieures \u00e0 11.7.2",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Ventura versions 13.x ant\u00e9rieures \u00e0 13.1",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Monterey versions 12.x ant\u00e9rieures \u00e0 12.6.2",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Safari versions ant\u00e9rieures \u00e0 16.2",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions 16.x ant\u00e9rieures \u00e0 16.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iCloud pour Windows versions ant\u00e9rieures \u00e0 14.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-46698",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46698"
},
{
"name": "CVE-2022-42865",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42865"
},
{
"name": "CVE-2022-42861",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42861"
},
{
"name": "CVE-2022-42821",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42821"
},
{
"name": "CVE-2022-42852",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42852"
},
{
"name": "CVE-2022-46699",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46699"
},
{
"name": "CVE-2022-42864",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42864"
},
{
"name": "CVE-2022-32943",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32943"
},
{
"name": "CVE-2022-42867",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42867"
},
{
"name": "CVE-2022-42866",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42866"
},
{
"name": "CVE-2022-42850",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42850"
},
{
"name": "CVE-2022-46696",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46696"
},
{
"name": "CVE-2022-42848",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42848"
},
{
"name": "CVE-2022-42855",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42855"
},
{
"name": "CVE-2022-46701",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46701"
},
{
"name": "CVE-2022-42863",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42863"
},
{
"name": "CVE-2022-42837",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42837"
},
{
"name": "CVE-2022-46689",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46689"
},
{
"name": "CVE-2022-46691",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46691"
},
{
"name": "CVE-2022-42859",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42859"
},
{
"name": "CVE-2022-42856",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42856"
},
{
"name": "CVE-2022-42844",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42844"
},
{
"name": "CVE-2022-40303",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-40303"
},
{
"name": "CVE-2022-42840",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42840"
},
{
"name": "CVE-2022-42849",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42849"
},
{
"name": "CVE-2022-46694",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46694"
},
{
"name": "CVE-2022-42862",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42862"
},
{
"name": "CVE-2022-46690",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46690"
},
{
"name": "CVE-2022-24836",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24836"
},
{
"name": "CVE-2022-42841",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42841"
},
{
"name": "CVE-2022-42842",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42842"
},
{
"name": "CVE-2022-42851",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42851"
},
{
"name": "CVE-2022-42845",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42845"
},
{
"name": "CVE-2022-42843",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42843"
},
{
"name": "CVE-2022-46700",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46700"
},
{
"name": "CVE-2022-42846",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42846"
},
{
"name": "CVE-2022-32942",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32942"
},
{
"name": "CVE-2022-46702",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46702"
},
{
"name": "CVE-2022-42847",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42847"
},
{
"name": "CVE-2022-46695",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46695"
},
{
"name": "CVE-2022-29181",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29181"
},
{
"name": "CVE-2022-46692",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46692"
},
{
"name": "CVE-2022-42854",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42854"
},
{
"name": "CVE-2022-40304",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-40304"
},
{
"name": "CVE-2022-46697",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46697"
},
{
"name": "CVE-2022-42853",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42853"
},
{
"name": "CVE-2022-46693",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46693"
}
],
"links": [],
"reference": "CERTFR-2022-AVI-1108",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-12-15T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un contournement de la\npolitique de s\u00e9curit\u00e9 et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple du 13 d\u00e9cembre 2022",
"url": "https://support.apple.com/en-us/HT213516"
}
]
}
CERTFR-2022-AVI-1024
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un déni de service à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 16.1.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 16.1.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Ventura versions ant\u00e9rieures \u00e0 13.0.1",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-40303",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-40303"
},
{
"name": "CVE-2022-40304",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-40304"
}
],
"links": [],
"reference": "CERTFR-2022-AVI-1024",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-11-10T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nElles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code\narbitraire \u00e0 distance et un d\u00e9ni de service \u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213505 du 09 novembre 2022",
"url": "https://support.apple.com/en-us/HT213505"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213504 du 09 novembre 2022",
"url": "https://support.apple.com/en-us/HT213504"
}
]
}
CERTFR-2022-AVI-983
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Apple Xcode. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un contournement de la politique de sécurité et une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneReferences
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Xcode versions ant\u00e9rieures \u00e0 14.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-39260",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-39260"
},
{
"name": "CVE-2022-42797",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42797"
},
{
"name": "CVE-2022-29187",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29187"
},
{
"name": "CVE-2022-39253",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-39253"
}
],
"links": [],
"reference": "CERTFR-2022-AVI-983",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-11-02T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Apple Xcode.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un contournement de la\npolitique de s\u00e9curit\u00e9 et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple Xcode",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213496 du 01 novembre 2022",
"url": "https://support.apple.com/en-us/HT213496"
}
]
}
CERTFR-2022-AVI-963
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Apple iOS et iPadOS. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Apple indique que la vulnérabilité CVE-2022-42827 serait activement exploitée dans le cadre d'attaques ciblées.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneReferences
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iOS et iPadOS versions ant\u00e9rieures \u00e0 15.7.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-32927",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32927"
},
{
"name": "CVE-2022-42803",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42803"
},
{
"name": "CVE-2022-42800",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42800"
},
{
"name": "CVE-2022-32935",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32935"
},
{
"name": "CVE-2022-42827",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42827"
},
{
"name": "CVE-2022-32944",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32944"
},
{
"name": "CVE-2022-32929",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32929"
},
{
"name": "CVE-2022-32923",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32923"
},
{
"name": "CVE-2022-32926",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32926"
},
{
"name": "CVE-2022-42798",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42798"
},
{
"name": "CVE-2022-37434",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-37434"
},
{
"name": "CVE-2022-32939",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32939"
},
{
"name": "CVE-2022-32949",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32949"
},
{
"name": "CVE-2022-32941",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32941"
},
{
"name": "CVE-2022-42810",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42810"
},
{
"name": "CVE-2022-42801",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42801"
},
{
"name": "CVE-2022-32932",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32932"
},
{
"name": "CVE-2022-42817",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42817"
}
],
"links": [],
"reference": "CERTFR-2022-AVI-963",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-10-28T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Apple iOS et\niPadOS. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0\ndistance et un contournement de la politique de s\u00e9curit\u00e9.\n\nApple indique que la vuln\u00e9rabilit\u00e9 CVE-2022-42827 serait activement\nexploit\u00e9e dans le cadre d\u0027attaques cibl\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple iOS et iPadOS",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213490 du 27 octobre 2022",
"url": "https://support.apple.com/fr-fr/HT213490"
}
]
}
CERTFR-2022-AVI-947
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur, une exécution de code arbitraire à distance et un déni de service à distance.
Apple indique que la vulnérabilité CVE-2022-42827 serait activement exploitée.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | N/A | watchOS versions antérieures à 9.1 | ||
| Apple | N/A | iPadOS versions antérieures à 16 | ||
| Apple | macOS | macOS Monterey versions antérieures à 12.6.1 | ||
| Apple | Safari | Safari versions antérieures à 16.1 | ||
| Apple | macOS | macOS Ventura versions antérieures à 13 | ||
| Apple | N/A | iOS versions antérieures à 16.1 | ||
| Apple | macOS | macOS Big Sur versions antérieures à 11.7.1 | ||
| Apple | N/A | tvOS versions antérieures à 16.1 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "watchOS versions ant\u00e9rieures \u00e0 9.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 16",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Monterey versions ant\u00e9rieures \u00e0 12.6.1",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Safari versions ant\u00e9rieures \u00e0 16.1",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Ventura versions ant\u00e9rieures \u00e0 13",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 16.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Big Sur versions ant\u00e9rieures \u00e0 11.7.1",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "tvOS versions ant\u00e9rieures \u00e0 16.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-1621",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1621"
},
{
"name": "CVE-2022-42819",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42819"
},
{
"name": "CVE-2022-0261",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0261"
},
{
"name": "CVE-2022-2000",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2000"
},
{
"name": "CVE-2022-1381",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1381"
},
{
"name": "CVE-2022-0696",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0696"
},
{
"name": "CVE-2021-39537",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-39537"
},
{
"name": "CVE-2022-1898",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1898"
},
{
"name": "CVE-2022-42832",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42832"
},
{
"name": "CVE-2022-42823",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42823"
},
{
"name": "CVE-2022-32208",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32208"
},
{
"name": "CVE-2022-32913",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32913"
},
{
"name": "CVE-2022-32928",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32928"
},
{
"name": "CVE-2021-36690",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36690"
},
{
"name": "CVE-2022-42815",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42815"
},
{
"name": "CVE-2022-1968",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1968"
},
{
"name": "CVE-2022-32936",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32936"
},
{
"name": "CVE-2022-28739",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28739"
},
{
"name": "CVE-2022-32207",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32207"
},
{
"name": "CVE-2022-42793",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42793"
},
{
"name": "CVE-2022-32915",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32915"
},
{
"name": "CVE-2022-1629",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1629"
},
{
"name": "CVE-2022-42827",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42827"
},
{
"name": "CVE-2022-42830",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42830"
},
{
"name": "CVE-2022-0554",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0554"
},
{
"name": "CVE-2022-32862",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32862"
},
{
"name": "CVE-2022-0572",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0572"
},
{
"name": "CVE-2022-42824",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42824"
},
{
"name": "CVE-2022-2042",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2042"
},
{
"name": "CVE-2022-0714",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0714"
},
{
"name": "CVE-2022-1733",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1733"
},
{
"name": "CVE-2022-0943",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0943"
},
{
"name": "CVE-2022-1927",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1927"
},
{
"name": "CVE-2022-1851",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1851"
},
{
"name": "CVE-2022-2126",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2126"
},
{
"name": "CVE-2022-42795",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42795"
},
{
"name": "CVE-2022-1897",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1897"
},
{
"name": "CVE-2022-0368",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0368"
},
{
"name": "CVE-2022-0319",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0319"
},
{
"name": "CVE-2022-42829",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42829"
},
{
"name": "CVE-2022-42831",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42831"
},
{
"name": "CVE-2022-42806",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42806"
},
{
"name": "CVE-2022-1616",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1616"
},
{
"name": "CVE-2022-42796",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42796"
},
{
"name": "CVE-2022-32866",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32866"
},
{
"name": "CVE-2022-42808",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42808"
},
{
"name": "CVE-2022-32940",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32940"
},
{
"name": "CVE-2022-42790",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42790"
},
{
"name": "CVE-2022-42788",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42788"
},
{
"name": "CVE-2022-32886",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32886"
},
{
"name": "CVE-2022-1622",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1622"
},
{
"name": "CVE-2022-0629",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0629"
},
{
"name": "CVE-2022-29458",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29458"
},
{
"name": "CVE-2022-32890",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32890"
},
{
"name": "CVE-2022-0729",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0729"
},
{
"name": "CVE-2022-42814",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42814"
},
{
"name": "CVE-2022-32867",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32867"
},
{
"name": "CVE-2022-32924",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32924"
},
{
"name": "CVE-2022-32883",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32883"
},
{
"name": "CVE-2022-1725",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1725"
},
{
"name": "CVE-2022-42818",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42818"
},
{
"name": "CVE-2022-42789",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42789"
},
{
"name": "CVE-2022-32912",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32912"
},
{
"name": "CVE-2022-0392",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0392"
},
{
"name": "CVE-2022-32205",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32205"
},
{
"name": "CVE-2022-32918",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32918"
},
{
"name": "CVE-2022-32908",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32908"
},
{
"name": "CVE-2022-1620",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1620"
},
{
"name": "CVE-2022-32911",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32911"
},
{
"name": "CVE-2022-42813",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42813"
},
{
"name": "CVE-2022-32864",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32864"
},
{
"name": "CVE-2022-1942",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1942"
},
{
"name": "CVE-2022-1735",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1735"
},
{
"name": "CVE-2022-1720",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1720"
},
{
"name": "CVE-2022-42809",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42809"
},
{
"name": "CVE-2022-0359",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0359"
},
{
"name": "CVE-2022-1420",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1420"
},
{
"name": "CVE-2022-32898",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32898"
},
{
"name": "CVE-2022-32938",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32938"
},
{
"name": "CVE-2022-32827",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32827"
},
{
"name": "CVE-2022-26730",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26730"
},
{
"name": "CVE-2022-42799",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42799"
},
{
"name": "CVE-2022-32914",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32914"
},
{
"name": "CVE-2022-0351",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0351"
},
{
"name": "CVE-2022-32875",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32875"
},
{
"name": "CVE-2022-0361",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0361"
},
{
"name": "CVE-2022-32206",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32206"
},
{
"name": "CVE-2022-32892",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32892"
},
{
"name": "CVE-2022-32881",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32881"
},
{
"name": "CVE-2022-42811",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42811"
},
{
"name": "CVE-2022-32905",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32905"
},
{
"name": "CVE-2022-32895",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32895"
},
{
"name": "CVE-2022-32922",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32922"
},
{
"name": "CVE-2022-1674",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1674"
},
{
"name": "CVE-2022-32902",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32902"
},
{
"name": "CVE-2022-0318",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0318"
},
{
"name": "CVE-2022-32904",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32904"
},
{
"name": "CVE-2022-32879",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32879"
},
{
"name": "CVE-2022-2124",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2124"
},
{
"name": "CVE-2022-32865",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32865"
},
{
"name": "CVE-2022-1769",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1769"
},
{
"name": "CVE-2022-32947",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32947"
},
{
"name": "CVE-2022-1619",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1619"
},
{
"name": "CVE-2022-32858",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32858"
},
{
"name": "CVE-2022-32899",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32899"
},
{
"name": "CVE-2022-32870",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32870"
},
{
"name": "CVE-2022-0685",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0685"
},
{
"name": "CVE-2022-42820",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42820"
},
{
"name": "CVE-2022-32934",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32934"
},
{
"name": "CVE-2022-42825",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42825"
},
{
"name": "CVE-2022-32888",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32888"
},
{
"name": "CVE-2022-2125",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2125"
},
{
"name": "CVE-2022-42791",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42791"
},
{
"name": "CVE-2022-32946",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32946"
}
],
"links": [],
"reference": "CERTFR-2022-AVI-947",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-10-25T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un\nprobl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur, une ex\u00e9cution de code\narbitraire \u00e0 distance et un d\u00e9ni de service \u00e0 distance.\n\nApple indique que la vuln\u00e9rabilit\u00e9\u00a0CVE-2022-42827 serait activement\nexploit\u00e9e.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213493 du 24 octobre 2022",
"url": "https://support.apple.com/fr-fr/HT213493"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213489 du 24 octobre 2022",
"url": "https://support.apple.com/fr-fr/HT213489"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213492 du 24 octobre 2022",
"url": "https://support.apple.com/fr-fr/HT213492"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213491 du 24 octobre 2022",
"url": "https://support.apple.com/fr-fr/HT213491"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213494 du 24 octobre 2022",
"url": "https://support.apple.com/fr-fr/HT213494"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213488 du 24 octobre 2022",
"url": "https://support.apple.com/fr-fr/HT213488"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213495 du 24 octobre 2022",
"url": "https://support.apple.com/fr-fr/HT213495"
}
]
}
CERTFR-2022-AVI-893
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité a été découverte dans Apple iOS. Elle permet à un attaquant de provoquer un déni de service à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneReferences
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iOS versions ant\u00e9rieures \u00e0 16.0.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-22658",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22658"
}
],
"links": [],
"reference": "CERTFR-2022-AVI-893",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-10-11T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Apple iOS. Elle permet \u00e0 un\nattaquant de provoquer un d\u00e9ni de service \u00e0 distance.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans Apple iOS",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213480 du 10 octobre 2022",
"url": "https://support.apple.com/fr-fr/HT213480"
}
]
}
CERTFR-2022-AVI-812
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un contournement de la politique de sécurité et une atteinte à l'intégrité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iOS 15.7 et iPadOS versions ant\u00e9rieures \u00e0 15.7",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Safari versions ant\u00e9rieures \u00e0 16",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 16",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Monterey versions ant\u00e9rieures \u00e0 12.6",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Big Sur versions ant\u00e9rieures \u00e0 11.7",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-32891",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32891"
},
{
"name": "CVE-2022-32795",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32795"
},
{
"name": "CVE-2022-32917",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32917"
},
{
"name": "CVE-2022-32900",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32900"
},
{
"name": "CVE-2022-32854",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32854"
},
{
"name": "CVE-2022-32886",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32886"
},
{
"name": "CVE-2022-32896",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32896"
},
{
"name": "CVE-2022-32894",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32894"
},
{
"name": "CVE-2022-32883",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32883"
},
{
"name": "CVE-2022-32912",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32912"
},
{
"name": "CVE-2022-32908",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32908"
},
{
"name": "CVE-2022-32911",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32911"
},
{
"name": "CVE-2022-32864",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32864"
},
{
"name": "CVE-2022-32868",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32868"
},
{
"name": "CVE-2022-32902",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32902"
},
{
"name": "CVE-2022-32872",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32872"
}
],
"links": [],
"reference": "CERTFR-2022-AVI-812",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-09-13T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un contournement de la\npolitique de s\u00e9curit\u00e9 et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213443 du 12 septembre 2022",
"url": "https://support.apple.com/en-us/HT213443"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213445 du 12 septembre 2022",
"url": "https://support.apple.com/en-us/HT213445"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213442 du 12 septembre 2022",
"url": "https://support.apple.com/en-us/HT213442"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213444 du 12 septembre 2022",
"url": "https://support.apple.com/en-us/HT213444"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213446 du 12 septembre 2022",
"url": "https://support.apple.com/en-us/HT213446"
}
]
}
CERTFR-2022-AVI-752
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance.
Apple indique que les vulnérabilités CVE-2022-32893 et CVE-2022-32894 seraient activement exploitées.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iOS et iPadOS versions ant\u00e9rieures \u00e0 15.6.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Monterey versions ant\u00e9rieures \u00e0 12.5.1",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-32893",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32893"
},
{
"name": "CVE-2022-32894",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32894"
}
],
"links": [],
"reference": "CERTFR-2022-AVI-752",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-08-18T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nElles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code\narbitraire \u00e0 distance.\n\nApple indique que les vuln\u00e9rabilit\u00e9s\u00a0CVE-2022-32893 et\u00a0CVE-2022-32894\nseraient activement exploit\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213413 du 17 ao\u00fbt 2022",
"url": "https://support.apple.com/fr-fr/HT213413"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213412 du 17 ao\u00fbt 2022",
"url": "https://support.apple.com/fr-fr/HT213412"
}
]
}
CERTFR-2022-AVI-665
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur, une exécution de code arbitraire à distance et un déni de service à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | macOS | macOS Catalina sans le correctif de sécurité 2022-005 | ||
| Apple | macOS | macOS Big Sur versions antérieures à 11.6.8 | ||
| Apple | macOS | macOS Monterey versions antérieures à 12.5 | ||
| Apple | N/A | watchOS versions antérieures à 8.7 | ||
| Apple | N/A | tvOS versions antérieures à 15.6 | ||
| Apple | N/A | iOS et iPadOS versions antérieures à 15.6 | ||
| Apple | Safari | Safari versions antérieures à 15.6 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "macOS Catalina sans le correctif de s\u00e9curit\u00e9 2022-005",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Big Sur versions ant\u00e9rieures \u00e0 11.6.8",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Monterey versions ant\u00e9rieures \u00e0 12.5",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions ant\u00e9rieures \u00e0 8.7",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "tvOS versions ant\u00e9rieures \u00e0 15.6",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS et iPadOS versions ant\u00e9rieures \u00e0 15.6",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Safari versions ant\u00e9rieures \u00e0 15.6",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-32789",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32789"
},
{
"name": "CVE-2022-32841",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32841"
},
{
"name": "CVE-2022-32823",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32823"
},
{
"name": "CVE-2022-32849",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32849"
},
{
"name": "CVE-2022-2294",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2294"
},
{
"name": "CVE-2022-0158",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0158"
},
{
"name": "CVE-2021-4192",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4192"
},
{
"name": "CVE-2022-32797",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32797"
},
{
"name": "CVE-2022-32815",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32815"
},
{
"name": "CVE-2022-32837",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32837"
},
{
"name": "CVE-2021-4173",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4173"
},
{
"name": "CVE-2022-32785",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32785"
},
{
"name": "CVE-2022-32839",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32839"
},
{
"name": "CVE-2022-32852",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32852"
},
{
"name": "CVE-2022-32843",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32843"
},
{
"name": "CVE-2022-24070",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24070"
},
{
"name": "CVE-2021-4136",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4136"
},
{
"name": "CVE-2022-32857",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32857"
},
{
"name": "CVE-2022-32842",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32842"
},
{
"name": "CVE-2022-0156",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0156"
},
{
"name": "CVE-2022-32845",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32845"
},
{
"name": "CVE-2022-32799",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32799"
},
{
"name": "CVE-2022-32817",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32817"
},
{
"name": "CVE-2022-29048",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29048"
},
{
"name": "CVE-2022-32820",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32820"
},
{
"name": "CVE-2022-32821",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32821"
},
{
"name": "CVE-2022-32844",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32844"
},
{
"name": "CVE-2021-4166",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4166"
},
{
"name": "CVE-2022-0128",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0128"
},
{
"name": "CVE-2022-32800",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32800"
},
{
"name": "CVE-2021-28544",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-28544"
},
{
"name": "CVE-2022-32828",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32828"
},
{
"name": "CVE-2022-26768",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26768"
},
{
"name": "CVE-2021-4193",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4193"
},
{
"name": "CVE-2022-32826",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32826"
},
{
"name": "CVE-2022-32787",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32787"
},
{
"name": "CVE-2022-32830",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32830"
},
{
"name": "CVE-2022-32824",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32824"
},
{
"name": "CVE-2022-32834",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32834"
},
{
"name": "CVE-2022-32813",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32813"
},
{
"name": "CVE-2022-32819",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32819"
},
{
"name": "CVE-2022-32838",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32838"
},
{
"name": "CVE-2022-32811",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32811"
},
{
"name": "CVE-2022-32840",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32840"
},
{
"name": "CVE-2022-26704",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26704"
},
{
"name": "CVE-2022-32814",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32814"
},
{
"name": "CVE-2022-32788",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32788"
},
{
"name": "CVE-2022-26981",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26981"
},
{
"name": "CVE-2022-32853",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32853"
},
{
"name": "CVE-2022-32801",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32801"
},
{
"name": "CVE-2022-32851",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32851"
},
{
"name": "CVE-2022-32802",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32802"
},
{
"name": "CVE-2022-32831",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32831"
},
{
"name": "CVE-2022-32798",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32798"
},
{
"name": "CVE-2022-32796",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32796"
},
{
"name": "CVE-2022-32847",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32847"
},
{
"name": "CVE-2022-32792",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32792"
},
{
"name": "CVE-2022-32829",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32829"
},
{
"name": "CVE-2022-29046",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29046"
},
{
"name": "CVE-2022-32855",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32855"
},
{
"name": "CVE-2022-32784",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32784"
},
{
"name": "CVE-2021-4187",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4187"
},
{
"name": "CVE-2022-32805",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32805"
},
{
"name": "CVE-2022-32825",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32825"
},
{
"name": "CVE-2022-32810",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32810"
},
{
"name": "CVE-2022-32818",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32818"
},
{
"name": "CVE-2022-32848",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32848"
},
{
"name": "CVE-2022-32812",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32812"
},
{
"name": "CVE-2021-46059",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-46059"
},
{
"name": "CVE-2022-32816",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32816"
},
{
"name": "CVE-2022-32793",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32793"
},
{
"name": "CVE-2022-32781",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32781"
},
{
"name": "CVE-2022-32832",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32832"
},
{
"name": "CVE-2022-32807",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32807"
},
{
"name": "CVE-2022-32786",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32786"
}
],
"links": [],
"reference": "CERTFR-2022-AVI-665",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-07-21T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un\nprobl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur, une ex\u00e9cution de code\narbitraire \u00e0 distance et un d\u00e9ni de service \u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213343 du 20 juillet 2022",
"url": "https://support.apple.com/fr-fr/HT213343"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213344 du 20 juillet 2022",
"url": "https://support.apple.com/fr-fr/HT213344"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213341 du 20 juillet 2022",
"url": "https://support.apple.com/fr-fr/HT213341"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213346 du 20 juillet 2022",
"url": "https://support.apple.com/fr-fr/HT213346"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213342 du 20 juillet 2022",
"url": "https://support.apple.com/fr-fr/HT213342"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213340 du 20 juillet 2022",
"url": "https://support.apple.com/fr-fr/HT213340"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213345 du 20 juillet 2022",
"url": "https://support.apple.com/fr-fr/HT213345"
}
]
}
CERTFR-2022-AVI-466
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | N/A | Apple iOS versions antérieures à 15.5 | ||
| Apple | macOS | Apple macOS Monterey versions antérieures à 12.4 | ||
| Apple | N/A | Apple tvOS versions antérieures à 15.5 | ||
| Apple | Safari | Apple Safari versions antérieures à 15.5 | ||
| Apple | N/A | Apple watchOS versions antérieures à 8.6 | ||
| Apple | N/A | Apple Xcode versions antérieures à 13.4 | ||
| Apple | macOS | Apple macOS Catalina versions antérieures à 2022-004 | ||
| Apple | N/A | Apple iPadOS versions antérieures à 15.5 | ||
| Apple | macOS | Apple macOS Big Sur versions antérieures à 11.6.6 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Apple iOS versions ant\u00e9rieures \u00e0 15.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple macOS Monterey versions ant\u00e9rieures \u00e0 12.4",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple tvOS versions ant\u00e9rieures \u00e0 15.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple Safari versions ant\u00e9rieures \u00e0 15.5",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple watchOS versions ant\u00e9rieures \u00e0 8.6",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple Xcode versions ant\u00e9rieures \u00e0 13.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple macOS Catalina versions ant\u00e9rieures \u00e0 2022-004",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple iPadOS versions ant\u00e9rieures \u00e0 15.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Apple macOS Big Sur versions ant\u00e9rieures \u00e0 11.6.6",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-26701",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26701"
},
{
"name": "CVE-2022-26722",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26722"
},
{
"name": "CVE-2022-26769",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26769"
},
{
"name": "CVE-2022-26761",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26761"
},
{
"name": "CVE-2021-4192",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4192"
},
{
"name": "CVE-2022-26751",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26751"
},
{
"name": "CVE-2022-26702",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26702"
},
{
"name": "CVE-2022-26693",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26693"
},
{
"name": "CVE-2022-26700",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26700"
},
{
"name": "CVE-2022-26753",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26753"
},
{
"name": "CVE-2022-26763",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26763"
},
{
"name": "CVE-2022-26776",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26776"
},
{
"name": "CVE-2022-26772",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26772"
},
{
"name": "CVE-2021-4173",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4173"
},
{
"name": "CVE-2022-26756",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26756"
},
{
"name": "CVE-2022-22721",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22721"
},
{
"name": "CVE-2022-26766",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26766"
},
{
"name": "CVE-2022-26744",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26744"
},
{
"name": "CVE-2022-26770",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26770"
},
{
"name": "CVE-2022-26739",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26739"
},
{
"name": "CVE-2022-22589",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22589"
},
{
"name": "CVE-2022-26723",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26723"
},
{
"name": "CVE-2022-22674",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22674"
},
{
"name": "CVE-2022-26760",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26760"
},
{
"name": "CVE-2022-26754",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26754"
},
{
"name": "CVE-2021-4136",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4136"
},
{
"name": "CVE-2022-26740",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26740"
},
{
"name": "CVE-2022-26762",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26762"
},
{
"name": "CVE-2022-26717",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26717"
},
{
"name": "CVE-2022-26708",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26708"
},
{
"name": "CVE-2022-24765",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24765"
},
{
"name": "CVE-2022-26711",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26711"
},
{
"name": "CVE-2022-26764",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26764"
},
{
"name": "CVE-2022-26765",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26765"
},
{
"name": "CVE-2022-26775",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26775"
},
{
"name": "CVE-2021-4166",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4166"
},
{
"name": "CVE-2022-0128",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0128"
},
{
"name": "CVE-2022-26742",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26742"
},
{
"name": "CVE-2022-22665",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22665"
},
{
"name": "CVE-2022-0530",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0530"
},
{
"name": "CVE-2022-22677",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22677"
},
{
"name": "CVE-2022-22673",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22673"
},
{
"name": "CVE-2022-26768",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26768"
},
{
"name": "CVE-2021-4193",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4193"
},
{
"name": "CVE-2022-26738",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26738"
},
{
"name": "CVE-2018-25032",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-25032"
},
{
"name": "CVE-2022-26719",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26719"
},
{
"name": "CVE-2022-22675",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22675"
},
{
"name": "CVE-2022-26720",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26720"
},
{
"name": "CVE-2022-26698",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26698"
},
{
"name": "CVE-2022-26748",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26748"
},
{
"name": "CVE-2022-26749",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26749"
},
{
"name": "CVE-2022-26714",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26714"
},
{
"name": "CVE-2022-26747",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26747"
},
{
"name": "CVE-2022-26726",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26726"
},
{
"name": "CVE-2022-22719",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22719"
},
{
"name": "CVE-2022-26704",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26704"
},
{
"name": "CVE-2022-26755",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26755"
},
{
"name": "CVE-2022-26725",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26725"
},
{
"name": "CVE-2021-45444",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-45444"
},
{
"name": "CVE-2022-23308",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23308"
},
{
"name": "CVE-2022-22663",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22663"
},
{
"name": "CVE-2022-26721",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26721"
},
{
"name": "CVE-2022-0778",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0778"
},
{
"name": "CVE-2022-26741",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26741"
},
{
"name": "CVE-2022-26728",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26728"
},
{
"name": "CVE-2022-22720",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22720"
},
{
"name": "CVE-2021-44224",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44224"
},
{
"name": "CVE-2022-26743",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26743"
},
{
"name": "CVE-2022-26727",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26727"
},
{
"name": "CVE-2022-26737",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26737"
},
{
"name": "CVE-2022-26736",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26736"
},
{
"name": "CVE-2022-26715",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26715"
},
{
"name": "CVE-2022-26731",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26731"
},
{
"name": "CVE-2022-26767",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26767"
},
{
"name": "CVE-2022-26771",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26771"
},
{
"name": "CVE-2015-4142",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-4142"
},
{
"name": "CVE-2022-26724",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26724"
},
{
"name": "CVE-2021-44790",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44790"
},
{
"name": "CVE-2022-26752",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26752"
},
{
"name": "CVE-2022-26706",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26706"
},
{
"name": "CVE-2021-4187",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4187"
},
{
"name": "CVE-2022-26750",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26750"
},
{
"name": "CVE-2021-46059",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-46059"
},
{
"name": "CVE-2022-26745",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26745"
},
{
"name": "CVE-2022-26746",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26746"
},
{
"name": "CVE-2022-26716",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26716"
},
{
"name": "CVE-2022-26712",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26712"
},
{
"name": "CVE-2022-26710",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26710"
},
{
"name": "CVE-2022-26718",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26718"
},
{
"name": "CVE-2022-26694",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26694"
},
{
"name": "CVE-2022-26703",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26703"
},
{
"name": "CVE-2022-26697",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26697"
},
{
"name": "CVE-2022-26709",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26709"
},
{
"name": "CVE-2022-26757",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26757"
}
],
"links": [],
"reference": "CERTFR-2022-AVI-466",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-05-17T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire, un d\u00e9ni de service et un contournement de\nla politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213257 du 16 mai 2022",
"url": "https://support.apple.com/fr-fr/HT213257"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213255 du 16 mai 2022",
"url": "https://support.apple.com/fr-fr/HT213255"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213261 du 16 mai 2022",
"url": "https://support.apple.com/fr-fr/HT213261"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213256 du 16 mai 2022",
"url": "https://support.apple.com/fr-fr/HT213256"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213253 du 16 mai 2022",
"url": "https://support.apple.com/fr-fr/HT213253"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213254 du 16 mai 2022",
"url": "https://support.apple.com/fr-fr/HT213254"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213258 du 16 mai 2022",
"url": "https://support.apple.com/fr-fr/HT213258"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213260 du 16 mai 2022",
"url": "https://support.apple.com/fr-fr/HT213260"
}
]
}
CERTFR-2022-AVI-243
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un contournement de la politique de sécurité et une atteinte à l'intégrité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | N/A | iTunes pour Windows versions antérieures à 12.12.3 | ||
| Apple | N/A | Xcode versions antérieures à 13.3 | ||
| Apple | macOS | macOS Catalina sans le correctif de sécurité 2022-003 | ||
| Apple | N/A | watchOS versions antérieures à 8.5 | ||
| Apple | macOS | macOS Monterey versions antérieures à 12.3 | ||
| Apple | N/A | Logic Pro X versions antérieures à 10.7.3 | ||
| Apple | N/A | iOS et iPadOS versions antérieures à 15.4 | ||
| Apple | N/A | GarageBand versions antérieures à 10.4.6 | ||
| Apple | macOS | macOS Big Sur versions antérieures à 11.6.5 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iTunes pour Windows versions ant\u00e9rieures \u00e0 12.12.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Xcode versions ant\u00e9rieures \u00e0 13.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Catalina sans le correctif de s\u00e9curit\u00e9 2022-003",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions ant\u00e9rieures \u00e0 8.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Monterey versions ant\u00e9rieures \u00e0 12.3",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Logic Pro X versions ant\u00e9rieures \u00e0 10.7.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS et iPadOS versions ant\u00e9rieures \u00e0 15.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "GarageBand versions ant\u00e9rieures \u00e0 10.4.6",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Big Sur versions ant\u00e9rieures \u00e0 11.6.5",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-22653",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22653"
},
{
"name": "CVE-2022-22652",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22652"
},
{
"name": "CVE-2022-22647",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22647"
},
{
"name": "CVE-2022-22659",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22659"
},
{
"name": "CVE-2022-22656",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22656"
},
{
"name": "CVE-2022-0158",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0158"
},
{
"name": "CVE-2022-22612",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22612"
},
{
"name": "CVE-2022-22671",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22671"
},
{
"name": "CVE-2022-22643",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22643"
},
{
"name": "CVE-2021-4192",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4192"
},
{
"name": "CVE-2022-22670",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22670"
},
{
"name": "CVE-2022-22651",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22651"
},
{
"name": "CVE-2022-22602",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22602"
},
{
"name": "CVE-2022-22611",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22611"
},
{
"name": "CVE-2022-22626",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22626"
},
{
"name": "CVE-2021-4173",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4173"
},
{
"name": "CVE-2022-22624",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22624"
},
{
"name": "CVE-2022-22597",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22597"
},
{
"name": "CVE-2022-22648",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22648"
},
{
"name": "CVE-2022-22641",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22641"
},
{
"name": "CVE-2022-22622",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22622"
},
{
"name": "CVE-2021-4136",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4136"
},
{
"name": "CVE-2022-22669",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22669"
},
{
"name": "CVE-2022-0156",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0156"
},
{
"name": "CVE-2022-22601",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22601"
},
{
"name": "CVE-2022-22623",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22623"
},
{
"name": "CVE-2022-22614",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22614"
},
{
"name": "CVE-2021-22947",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22947"
},
{
"name": "CVE-2022-22598",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22598"
},
{
"name": "CVE-2022-22666",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22666"
},
{
"name": "CVE-2022-22618",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22618"
},
{
"name": "CVE-2021-4166",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4166"
},
{
"name": "CVE-2021-22946",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22946"
},
{
"name": "CVE-2022-0128",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0128"
},
{
"name": "CVE-2022-22639",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22639"
},
{
"name": "CVE-2022-22662",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22662"
},
{
"name": "CVE-2022-22638",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22638"
},
{
"name": "CVE-2022-22609",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22609"
},
{
"name": "CVE-2022-22665",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22665"
},
{
"name": "CVE-2022-22600",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22600"
},
{
"name": "CVE-2022-22617",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22617"
},
{
"name": "CVE-2022-22640",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22640"
},
{
"name": "CVE-2022-22642",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22642"
},
{
"name": "CVE-2022-22596",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22596"
},
{
"name": "CVE-2021-4193",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4193"
},
{
"name": "CVE-2021-36976",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36976"
},
{
"name": "CVE-2022-22582",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22582"
},
{
"name": "CVE-2022-22605",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22605"
},
{
"name": "CVE-2022-22599",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22599"
},
{
"name": "CVE-2022-22650",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22650"
},
{
"name": "CVE-2022-22625",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22625"
},
{
"name": "CVE-2022-22604",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22604"
},
{
"name": "CVE-2022-22632",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22632"
},
{
"name": "CVE-2022-22660",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22660"
},
{
"name": "CVE-2022-22657",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22657"
},
{
"name": "CVE-2022-22607",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22607"
},
{
"name": "CVE-2022-22627",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22627"
},
{
"name": "CVE-2022-22636",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22636"
},
{
"name": "CVE-2022-22615",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22615"
},
{
"name": "CVE-2022-22634",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22634"
},
{
"name": "CVE-2022-22635",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22635"
},
{
"name": "CVE-2021-30918",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30918"
},
{
"name": "CVE-2022-22621",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22621"
},
{
"name": "CVE-2022-22637",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22637"
},
{
"name": "CVE-2022-22654",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22654"
},
{
"name": "CVE-2022-22606",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22606"
},
{
"name": "CVE-2022-22633",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22633"
},
{
"name": "CVE-2021-44228",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44228"
},
{
"name": "CVE-2022-22603",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22603"
},
{
"name": "CVE-2022-22616",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22616"
},
{
"name": "CVE-2022-22661",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22661"
},
{
"name": "CVE-2022-22613",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22613"
},
{
"name": "CVE-2022-22610",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22610"
},
{
"name": "CVE-2022-22608",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22608"
},
{
"name": "CVE-2022-22668",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22668"
},
{
"name": "CVE-2019-14379",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14379"
},
{
"name": "CVE-2022-22628",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22628"
},
{
"name": "CVE-2022-22644",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22644"
},
{
"name": "CVE-2021-4187",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4187"
},
{
"name": "CVE-2022-22664",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22664"
},
{
"name": "CVE-2022-22667",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22667"
},
{
"name": "CVE-2021-46059",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-46059"
},
{
"name": "CVE-2022-22629",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22629"
},
{
"name": "CVE-2021-22945",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22945"
},
{
"name": "CVE-2022-22631",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22631"
}
],
"links": [],
"reference": "CERTFR-2022-AVI-243",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-03-15T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un contournement de la\npolitique de s\u00e9curit\u00e9 et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213191 du 14 mars 2022",
"url": "https://support.apple.com/fr-fr/HT213191"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213182 du 14 mars 2022",
"url": "https://support.apple.com/fr-fr/HT213182"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213184 du 14 mars 2022",
"url": "https://support.apple.com/fr-fr/HT213184"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213185 du 14 mars 2022",
"url": "https://support.apple.com/fr-fr/HT213185"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213183 du 14 mars 2022",
"url": "https://support.apple.com/fr-fr/HT213183"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213188 du 14 mars 2022",
"url": "https://support.apple.com/fr-fr/HT213188"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213190 du 14 mars 2022",
"url": "https://support.apple.com/fr-fr/HT213190"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213193 du 14 mars 2022",
"url": "https://support.apple.com/fr-fr/HT213193"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213189 du 14 mars 2022",
"url": "https://support.apple.com/fr-fr/HT213189"
}
]
}
CERTFR-2022-AVI-137
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité a été découverte dans les produits Apple. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.
L'éditeur indique que cette vulnérabilité serait activement exploitée.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | N/A | iPadOS versions antérieures à 15.3.1 | ||
| Apple | N/A | iOS versions antérieures à 15.3.1 | ||
| Apple | Safari | Safari versions antérieures à 15.3 (build number 16612.4.9.1.8 sur macOS Big Sur, 15612.4.9.1.8 sur macOS Catalina) | ||
| Apple | macOS | macOS Monterey versions antérieures à 12.2.1 |
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 15.3.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 15.3.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Safari versions ant\u00e9rieures \u00e0 15.3 (build number 16612.4.9.1.8 sur macOS Big Sur, 15612.4.9.1.8 sur macOS Catalina)",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Monterey versions ant\u00e9rieures \u00e0 12.2.1",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-22620",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22620"
}
],
"links": [],
"reference": "CERTFR-2022-AVI-137",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-02-11T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Apple. Elle permet\n\u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance.\n\n\u003cstrong\u003eL\u0027\u00e9diteur indique que cette vuln\u00e9rabilit\u00e9 serait activement\nexploit\u00e9e.\u003c/strong\u003e\n",
"title": "Vuln\u00e9rabilit\u00e9 dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213092 du 10 f\u00e9vrier 2022",
"url": "https://support.apple.com/fr-fr/HT213092"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213091 du 10 f\u00e9vrier 2022",
"url": "https://support.apple.com/fr-fr/HT213091"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213093 du 10 f\u00e9vrier 2022",
"url": "https://support.apple.com/fr-fr/HT213093"
}
]
}
CERTFR-2022-AVI-088
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | N/A | iOS et iPadOS versions 15.x antérieures à 15.3 | ||
| Apple | macOS | macOS Big Sur versions 11.6.x antérieures à 11.6.3 | ||
| Apple | macOS | macOS Monterey versions 12.x antérieures à 12.2 | ||
| Apple | macOS | macOS Catalina versions antérieures à la mise à jour 2022-001 | ||
| Apple | N/A | watchOS versions 8.x antérieures à 8.4 | ||
| Apple | N/A | tvOS versions 15.x antérieures à 15.3 | ||
| Apple | Safari | Safari versions 15.x antérieures à 15.3 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iOS et iPadOS versions 15.x ant\u00e9rieures \u00e0 15.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Big Sur versions 11.6.x ant\u00e9rieures \u00e0 11.6.3",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Monterey versions 12.x ant\u00e9rieures \u00e0 12.2",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Catalina versions ant\u00e9rieures \u00e0 la mise \u00e0 jour 2022-001",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions 8.x ant\u00e9rieures \u00e0 8.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "tvOS versions 15.x ant\u00e9rieures \u00e0 15.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Safari versions 15.x ant\u00e9rieures \u00e0 15.3",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-22594",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22594"
},
{
"name": "CVE-2022-22587",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22587"
},
{
"name": "CVE-2022-22590",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22590"
},
{
"name": "CVE-2022-22589",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22589"
},
{
"name": "CVE-2022-22585",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22585"
},
{
"name": "CVE-2022-22591",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22591"
},
{
"name": "CVE-2022-22592",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22592"
},
{
"name": "CVE-2022-22584",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22584"
},
{
"name": "CVE-2022-22583",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22583"
},
{
"name": "CVE-2022-22579",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22579"
},
{
"name": "CVE-2021-30960",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30960"
},
{
"name": "CVE-2022-22586",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22586"
},
{
"name": "CVE-2021-30972",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30972"
},
{
"name": "CVE-2022-22593",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22593"
},
{
"name": "CVE-2022-22578",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22578"
},
{
"name": "CVE-2021-30946",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30946"
}
],
"links": [],
"reference": "CERTFR-2022-AVI-088",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-01-27T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire, un d\u00e9ni de service et un contournement de\nla politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213059 du 26 janvier 2022",
"url": "https://support.apple.com/en-us/HT213059"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213056 du 26 janvier 2022",
"url": "https://support.apple.com/en-us/HT213056"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213057 du 26 janvier 2022",
"url": "https://support.apple.com/en-us/HT213057"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213058 du 26 janvier 2022",
"url": "https://support.apple.com/en-us/HT213058"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213054 du 26 janvier 2022",
"url": "https://support.apple.com/en-us/HT213054"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213053 du 26 janvier 2022",
"url": "https://support.apple.com/en-us/HT213053"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213055 du 26 janvier 2022",
"url": "https://support.apple.com/en-us/HT213055"
}
]
}
CERTFR-2022-AVI-034
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité a été découverte dans Apple iOS et iPadOS. Elle permet à un attaquant de provoquer un déni de service.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iOS versions ant\u00e9rieures \u00e0 15.2.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 15.2.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-22588",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22588"
}
],
"links": [],
"reference": "CERTFR-2022-AVI-034",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-01-13T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Apple iOS et iPadOS. Elle permet\n\u00e0 un attaquant de provoquer un d\u00e9ni de service.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans Apple iOS et iPadOS",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT213043 du 13 janvier 2022",
"url": "https://support.apple.com/en-us/HT213043"
}
]
}
CERTFR-2021-AVI-945
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | N/A | watchOS versions 8.x antérieures à 8.3 | ||
| Apple | N/A | iOS et iPadOS versions 15.x antérieures à 15.2 | ||
| Apple | macOS | macOS Monterey versions 12.x antérieures à 12.1 | ||
| Apple | macOS | macOS Big Sur versions 11.6.x antérieures à 11.6.2 | ||
| Apple | macOS | macOS Catalina versions antérieures à la mise à jour 2021-008 | ||
| Apple | N/A | tvOS versions 15.x antérieures à 15.2 |
References
| Title | Publication Time | Tags | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "watchOS versions 8.x ant\u00e9rieures \u00e0 8.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS et iPadOS versions 15.x ant\u00e9rieures \u00e0 15.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Monterey versions 12.x ant\u00e9rieures \u00e0 12.1",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Big Sur versions 11.6.x ant\u00e9rieures \u00e0 11.6.2",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Catalina versions ant\u00e9rieures \u00e0 la mise \u00e0 jour 2021-008",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "tvOS versions 15.x ant\u00e9rieures \u00e0 15.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-30993",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30993"
},
{
"name": "CVE-2021-30983",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30983"
},
{
"name": "CVE-2021-30971",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30971"
},
{
"name": "CVE-2021-30964",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30964"
},
{
"name": "CVE-2021-30957",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30957"
},
{
"name": "CVE-2021-30981",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30981"
},
{
"name": "CVE-2021-30939",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30939"
},
{
"name": "CVE-2021-30948",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30948"
},
{
"name": "CVE-2021-30767",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30767"
},
{
"name": "CVE-2021-30987",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30987"
},
{
"name": "CVE-2021-30992",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30992"
},
{
"name": "CVE-2021-30969",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30969"
},
{
"name": "CVE-2021-30963",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30963"
},
{
"name": "CVE-2021-30967",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30967"
},
{
"name": "CVE-2021-30951",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30951"
},
{
"name": "CVE-2021-30986",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30986"
},
{
"name": "CVE-2021-30916",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30916"
},
{
"name": "CVE-2021-30950",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30950"
},
{
"name": "CVE-2021-30976",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30976"
},
{
"name": "CVE-2021-30965",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30965"
},
{
"name": "CVE-2021-30966",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30966"
},
{
"name": "CVE-2021-30982",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30982"
},
{
"name": "CVE-2021-30941",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30941"
},
{
"name": "CVE-2021-30985",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30985"
},
{
"name": "CVE-2021-30958",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30958"
},
{
"name": "CVE-2021-30931",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30931"
},
{
"name": "CVE-2021-30960",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30960"
},
{
"name": "CVE-2021-30968",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30968"
},
{
"name": "CVE-2021-30945",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30945"
},
{
"name": "CVE-2021-30934",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30934"
},
{
"name": "CVE-2021-30947",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30947"
},
{
"name": "CVE-2021-30932",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30932"
},
{
"name": "CVE-2021-30979",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30979"
},
{
"name": "CVE-2021-30980",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30980"
},
{
"name": "CVE-2021-30973",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30973"
},
{
"name": "CVE-2021-30970",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30970"
},
{
"name": "CVE-2021-30996",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30996"
},
{
"name": "CVE-2021-30940",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30940"
},
{
"name": "CVE-2021-30954",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30954"
},
{
"name": "CVE-2021-30977",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30977"
},
{
"name": "CVE-2021-30942",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30942"
},
{
"name": "CVE-2021-30990",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30990"
},
{
"name": "CVE-2021-30929",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30929"
},
{
"name": "CVE-2021-30937",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30937"
},
{
"name": "CVE-2021-30936",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30936"
},
{
"name": "CVE-2021-30975",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30975"
},
{
"name": "CVE-2021-30953",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30953"
},
{
"name": "CVE-2021-30952",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30952"
},
{
"name": "CVE-2021-30949",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30949"
},
{
"name": "CVE-2021-30926",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30926"
},
{
"name": "CVE-2021-30946",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30946"
},
{
"name": "CVE-2021-30991",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30991"
},
{
"name": "CVE-2021-30935",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30935"
},
{
"name": "CVE-2021-30938",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30938"
},
{
"name": "CVE-2021-30955",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30955"
},
{
"name": "CVE-2021-30927",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30927"
},
{
"name": "CVE-2021-30988",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30988"
},
{
"name": "CVE-2021-30959",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30959"
},
{
"name": "CVE-2021-30984",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30984"
},
{
"name": "CVE-2021-30995",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30995"
},
{
"name": "CVE-2021-30961",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30961"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-945",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-12-14T00:00:00.000000"
}
],
"risks": [
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire, un d\u00e9ni de service et un contournement de\nla politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212979 du 13 d\u00e9cembre 2021",
"url": "https://support.apple.com/en-us/HT212979"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212981 du 13 d\u00e9cembre 2021",
"url": "https://support.apple.com/en-us/HT212981"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212976 du 13 d\u00e9cembre 2021",
"url": "https://support.apple.com/en-us/HT212976"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212975 du 13 d\u00e9cembre 2021",
"url": "https://support.apple.com/en-us/HT212975"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212978 du 13 d\u00e9cembre 2021",
"url": "https://support.apple.com/en-us/HT212978"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212980 du 13 d\u00e9cembre 2021",
"url": "https://support.apple.com/en-us/HT212980"
}
]
}
CERTFR-2021-AVI-825
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | N/A | watchOS versions antérieures à 8.1 | ||
| Apple | macOS | macOS Big Sur versions antérieures à 11.6.1 | ||
| Apple | N/A | iOS et iPadOS versions antérieures à 14.8.1 | ||
| Apple | N/A | tvOS versions antérieures à 15.1 | ||
| Apple | macOS | macOS Catalina sans le correctif de sécurité 2021-007 | ||
| Apple | N/A | iOS et iPadOS versions 15.x antérieures à 15.1 | ||
| Apple | macOS | macOS Monterey versions antérieures à 12.0.1 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "watchOS versions ant\u00e9rieures \u00e0 8.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Big Sur versions ant\u00e9rieures \u00e0 11.6.1",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS et iPadOS versions ant\u00e9rieures \u00e0 14.8.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "tvOS versions ant\u00e9rieures \u00e0 15.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Catalina sans le correctif de s\u00e9curit\u00e9 2021-007",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS et iPadOS versions 15.x ant\u00e9rieures \u00e0 15.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Monterey versions ant\u00e9rieures \u00e0 12.0.1",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-30875",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30875"
},
{
"name": "CVE-2021-30914",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30914"
},
{
"name": "CVE-2021-30909",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30909"
},
{
"name": "CVE-2021-30899",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30899"
},
{
"name": "CVE-2021-30892",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30892"
},
{
"name": "CVE-2021-30887",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30887"
},
{
"name": "CVE-2021-30895",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30895"
},
{
"name": "CVE-2021-30907",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30907"
},
{
"name": "CVE-2021-30861",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30861"
},
{
"name": "CVE-2021-30911",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30911"
},
{
"name": "CVE-2021-30833",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30833"
},
{
"name": "CVE-2021-30901",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30901"
},
{
"name": "CVE-2021-30823",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30823"
},
{
"name": "CVE-2021-30912",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30912"
},
{
"name": "CVE-2021-30896",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30896"
},
{
"name": "CVE-2021-30902",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30902"
},
{
"name": "CVE-2021-30888",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30888"
},
{
"name": "CVE-2021-30868",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30868"
},
{
"name": "CVE-2021-30864",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30864"
},
{
"name": "CVE-2021-30916",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30916"
},
{
"name": "CVE-2021-30834",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30834"
},
{
"name": "CVE-2021-30890",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30890"
},
{
"name": "CVE-2021-30879",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30879"
},
{
"name": "CVE-2021-30903",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30903"
},
{
"name": "CVE-2021-30880",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30880"
},
{
"name": "CVE-2021-30910",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30910"
},
{
"name": "CVE-2021-30886",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30886"
},
{
"name": "CVE-2021-30824",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30824"
},
{
"name": "CVE-2021-30908",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30908"
},
{
"name": "CVE-2021-30915",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30915"
},
{
"name": "CVE-2021-30906",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30906"
},
{
"name": "CVE-2021-30889",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30889"
},
{
"name": "CVE-2021-30813",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30813"
},
{
"name": "CVE-2021-30873",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30873"
},
{
"name": "CVE-2021-30917",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30917"
},
{
"name": "CVE-2021-30877",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30877"
},
{
"name": "CVE-2021-30920",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30920"
},
{
"name": "CVE-2021-30913",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30913"
},
{
"name": "CVE-2021-30918",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30918"
},
{
"name": "CVE-2021-30876",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30876"
},
{
"name": "CVE-2021-30905",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30905"
},
{
"name": "CVE-2021-30881",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30881"
},
{
"name": "CVE-2021-30821",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30821"
},
{
"name": "CVE-2021-30883",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30883"
},
{
"name": "CVE-2021-30894",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30894"
},
{
"name": "CVE-2021-30900",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30900"
},
{
"name": "CVE-2021-30919",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30919"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-825",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-10-27T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance\net un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212874 du 25 octobre 2021",
"url": "https://support.apple.com/fr-fr/HT212874"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212868 du 25 octobre 2021",
"url": "https://support.apple.com/fr-fr/HT212868"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212871 du 25 octobre 2021",
"url": "https://support.apple.com/fr-fr/HT212871"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212876 du 25 octobre 2021",
"url": "https://support.apple.com/fr-fr/HT212876"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212872 du 25 octobre 2021",
"url": "https://support.apple.com/fr-fr/HT212872"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212867 du 25 octobre 2021",
"url": "https://support.apple.com/fr-fr/HT212867"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212869 du 25 octobre 2021",
"url": "https://support.apple.com/fr-fr/HT212869"
}
]
}
CERTFR-2021-AVI-769
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité a été découverte dans Apple iOS et iPadOS. Elle permet à un attaquant de provoquer une exécution de code arbitraire.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 15.0.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 15.0.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-30883",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30883"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-769",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-10-12T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Apple iOS et iPadOS. Elle permet\n\u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans Apple iOS et iPadOS",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212846 du 11 octobre 2021",
"url": "https://support.apple.com/fr-fr/HT212846"
}
]
}
CERTFR-2021-AVI-732
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Elles permettent à un attaquant de provoquer une exécution de code arbitraire.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iOS versions 12.x ant\u00e9rieures \u00e0 12.5.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Catalina versions ant\u00e9rieures \u00e0 la mise \u00e0 jour 2021-006",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-30858",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30858"
},
{
"name": "CVE-2021-30869",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30869"
},
{
"name": "CVE-2021-30860",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30860"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-732",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-09-24T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nElles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code\narbitraire.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212825 du 23 septembre 2021",
"url": "https://support.apple.com/fr-fr/HT212825"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212824 du 23 septembre 2021",
"url": "https://support.apple.com/fr-fr/HT212824"
}
]
}
CERTFR-2021-AVI-719
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | N/A | tvOS versions antérieures à 15.0 | ||
| Apple | N/A | iTunes pour Windows versions antérieures à 12.12 | ||
| Apple | N/A | Xcode versions antérieures à 13.0 | ||
| Apple | N/A | iPadOS versions antérieures à 15.0 | ||
| Apple | N/A | watchOS versions antérieures à 8.0 | ||
| Apple | N/A | iOS versions antérieures à 15.0 | ||
| Apple | Safari | Safari versions antérieures à 15.0 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "tvOS versions ant\u00e9rieures \u00e0 15.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iTunes pour Windows versions ant\u00e9rieures \u00e0 12.12",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Xcode versions ant\u00e9rieures \u00e0 13.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 15.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions ant\u00e9rieures \u00e0 8.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 15.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Safari versions ant\u00e9rieures \u00e0 15.0",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-30850",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30850"
},
{
"name": "CVE-2021-30849",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30849"
},
{
"name": "CVE-2021-30841",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30841"
},
{
"name": "CVE-2018-16844",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16844"
},
{
"name": "CVE-2021-30811",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30811"
},
{
"name": "CVE-2021-30837",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30837"
},
{
"name": "CVE-2016-0746",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0746"
},
{
"name": "CVE-2021-30847",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30847"
},
{
"name": "CVE-2021-30835",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30835"
},
{
"name": "CVE-2018-16843",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16843"
},
{
"name": "CVE-2021-30855",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30855"
},
{
"name": "CVE-2019-20372",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20372"
},
{
"name": "CVE-2016-0747",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0747"
},
{
"name": "CVE-2021-30826",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30826"
},
{
"name": "CVE-2021-30846",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30846"
},
{
"name": "CVE-2021-30848",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30848"
},
{
"name": "CVE-2021-30854",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30854"
},
{
"name": "CVE-2018-16845",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-16845"
},
{
"name": "CVE-2021-30810",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30810"
},
{
"name": "CVE-2017-7529",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7529"
},
{
"name": "CVE-2021-30819",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30819"
},
{
"name": "CVE-2021-30863",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30863"
},
{
"name": "CVE-2021-30815",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30815"
},
{
"name": "CVE-2021-30825",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30825"
},
{
"name": "CVE-2021-30857",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30857"
},
{
"name": "CVE-2021-30838",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30838"
},
{
"name": "CVE-2016-0742",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0742"
},
{
"name": "CVE-2021-30851",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30851"
},
{
"name": "CVE-2013-0340",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-0340"
},
{
"name": "CVE-2021-30842",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30842"
},
{
"name": "CVE-2021-30843",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30843"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212817 du 20 septembre 2021",
"url": "https://support.apple.com/en-us/HT212817"
}
],
"reference": "CERTFR-2021-AVI-719",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-09-21T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire, un d\u00e9ni de service \u00e0 distance et un\ncontournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212818 du 20 septembre 2021",
"url": "https://support.apple.com/en-us/HT212818"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212819 du 20 septembre 2021",
"url": "https://support.apple.com/en-us/HT212819"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212816 du 20 septembre 2021",
"url": "https://support.apple.com/en-us/HT212816"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212817 du 20 septembre 2021",
"url": null
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212814 du 20 septembre 2021",
"url": "https://support.apple.com/en-us/HT212814"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212815 du 20 septembre 2021",
"url": "https://support.apple.com/en-us/HT212815"
}
]
}
CERTFR-2021-AVI-698
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | macOS | macOS Big Sur versions antérieures à 11.6 | ||
| Apple | N/A | iPadOS versions antérieures à 14.8 | ||
| Apple | N/A | iOS versions antérieures à 14.8 | ||
| Apple | Safari | Safari versions antérieures à 14.1.2 | ||
| Apple | N/A | watchOS versions antérieures à 7.6.2 | ||
| Apple | N/A | Catalina versions antérieures à 2021-005 |
References
| Title | Publication Time | Tags | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "macOS Big Sur versions ant\u00e9rieures \u00e0 11.6",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 14.8",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 14.8",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Safari versions ant\u00e9rieures \u00e0 14.1.2",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions ant\u00e9rieures \u00e0 7.6.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Catalina versions ant\u00e9rieures \u00e0 2021-005",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-30858",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30858"
},
{
"name": "CVE-2021-30860",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30860"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-698",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-09-14T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nElles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code\narbitraire \u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212808 du 13 septembre 2021",
"url": "https://support.apple.com/en-gb/HT212808"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212804 du 13 septembre 2021",
"url": "https://support.apple.com/en-gb/HT212804"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212807 du 13 septembre 2021",
"url": "https://support.apple.com/en-gb/HT212807"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212805 du 13 septembre 2021",
"url": "https://support.apple.com/en-gb/HT212805"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212806 du 13 septembre 2021",
"url": "https://support.apple.com/en-gb/HT212806"
}
]
}
CERTFR-2021-AVI-632
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Apple iCloud pour Windows. Elles permettent à un attaquant de provoquer une exécution de code arbitraire.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iCloud pour Windows versions ant\u00e9rieures \u00e0 12.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-30785",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30785"
},
{
"name": "CVE-2021-30779",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30779"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-632",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-08-17T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Apple iCloud pour\nWindows. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de\ncode arbitraire.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple iCloud pour Windows",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212607 du 16 ao\u00fbt 2021",
"url": "https://support.apple.com/fr-fr/HT212607"
}
]
}
CERTFR-2021-AVI-562
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 14.7",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Catalina versions ant\u00e9rieures \u00e0 2021-004",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 14.7",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Big Sur versions ant\u00e9rieures \u00e0 11.5",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Mojave versions ant\u00e9rieures \u00e0 2021-005",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-30784",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30784"
},
{
"name": "CVE-2021-30799",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30799"
},
{
"name": "CVE-2021-30672",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30672"
},
{
"name": "CVE-2021-30765",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30765"
},
{
"name": "CVE-2021-30731",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30731"
},
{
"name": "CVE-2021-30792",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30792"
},
{
"name": "CVE-2018-25014",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-25014"
},
{
"name": "CVE-2021-30787",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30787"
},
{
"name": "CVE-2021-30782",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30782"
},
{
"name": "CVE-2021-30800",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30800"
},
{
"name": "CVE-2021-30733",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30733"
},
{
"name": "CVE-2021-30766",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30766"
},
{
"name": "CVE-2018-25011",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-25011"
},
{
"name": "CVE-2021-30774",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30774"
},
{
"name": "CVE-2021-30778",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30778"
},
{
"name": "CVE-2021-30763",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30763"
},
{
"name": "CVE-2021-30776",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30776"
},
{
"name": "CVE-2021-30677",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30677"
},
{
"name": "CVE-2021-30775",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30775"
},
{
"name": "CVE-2021-30789",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30789"
},
{
"name": "CVE-2021-30759",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30759"
},
{
"name": "CVE-2018-25010",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-25010"
},
{
"name": "CVE-2021-30748",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30748"
},
{
"name": "CVE-2021-30796",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30796"
},
{
"name": "CVE-2021-30791",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30791"
},
{
"name": "CVE-2021-30770",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30770"
},
{
"name": "CVE-2021-30797",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30797"
},
{
"name": "CVE-2021-30788",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30788"
},
{
"name": "CVE-2021-30790",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30790"
},
{
"name": "CVE-2021-30703",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30703"
},
{
"name": "CVE-2021-30772",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30772"
},
{
"name": "CVE-2021-30781",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30781"
},
{
"name": "CVE-2021-30773",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30773"
},
{
"name": "CVE-2020-36328",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36328"
},
{
"name": "CVE-2021-30758",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30758"
},
{
"name": "CVE-2021-30803",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30803"
},
{
"name": "CVE-2021-30798",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30798"
},
{
"name": "CVE-2021-30769",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30769"
},
{
"name": "CVE-2021-30760",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30760"
},
{
"name": "CVE-2021-30785",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30785"
},
{
"name": "CVE-2021-30780",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30780"
},
{
"name": "CVE-2020-36330",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36330"
},
{
"name": "CVE-2021-30793",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30793"
},
{
"name": "CVE-2021-30779",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30779"
},
{
"name": "CVE-2021-30805",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30805"
},
{
"name": "CVE-2021-30786",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30786"
},
{
"name": "CVE-2020-36329",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36329"
},
{
"name": "CVE-2021-30804",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30804"
},
{
"name": "CVE-2021-30795",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30795"
},
{
"name": "CVE-2021-30777",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30777"
},
{
"name": "CVE-2020-36331",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36331"
},
{
"name": "CVE-2021-30768",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30768"
},
{
"name": "CVE-2021-30802",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30802"
},
{
"name": "CVE-2021-3518",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3518"
},
{
"name": "CVE-2021-30783",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30783"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-562",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-07-22T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service et un\ncontournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212601 du 21 juillet 2021",
"url": "https://support.apple.com/en-us/HT212601"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212600 du 21 juillet 2021",
"url": "https://support.apple.com/en-us/HT212600"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212602 du 21 juillet 2021",
"url": "https://support.apple.com/en-us/HT212602"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212603 du 21 juillet 2021",
"url": "https://support.apple.com/en-us/HT212603"
}
]
}
CERTFR-2021-AVI-462
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Apple iOS. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneReferences
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iOS version 12.5.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-30762",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30762"
},
{
"name": "CVE-2021-30737",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30737"
},
{
"name": "CVE-2021-30761",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30761"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-462",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-06-15T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Apple iOS. Elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Apple iOS",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212548 du 14 juin 2021",
"url": "https://support.apple.com/en-gb/HT212548"
}
]
}
CERTFR-2021-AVI-398
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | Safari | Safari versions antérieures à 14.1.1 | ||
| Apple | macOS | macOS Big Sur versions antérieures à 11.4 | ||
| Apple | macOS | macOS Catalina versions sans la mise à jour 2021-003 | ||
| Apple | N/A | iPadOS versions antérieures à 14.6 | ||
| Apple | N/A | tvOS versions antérieures à 14.6 | ||
| Apple | N/A | watchOS versions antérieures à 7.5 | ||
| Apple | macOS | macOS Mojave versions sans la mise à jour 2021-004 | ||
| Apple | N/A | iOS versions antérieures à 14.6 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Safari versions ant\u00e9rieures \u00e0 14.1.1",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Big Sur versions ant\u00e9rieures \u00e0 11.4",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Catalina versions sans la mise \u00e0 jour 2021-003",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 14.6",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "tvOS versions ant\u00e9rieures \u00e0 14.6",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions ant\u00e9rieures \u00e0 7.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Mojave versions sans la mise \u00e0 jour 2021-004",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 14.6",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-30678",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30678"
},
{
"name": "CVE-2021-30715",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30715"
},
{
"name": "CVE-2021-30724",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30724"
},
{
"name": "CVE-2021-30668",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30668"
},
{
"name": "CVE-2020-36230",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36230"
},
{
"name": "CVE-2021-30681",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30681"
},
{
"name": "CVE-2020-36221",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36221"
},
{
"name": "CVE-2021-30667",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30667"
},
{
"name": "CVE-2021-30722",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30722"
},
{
"name": "CVE-2021-30684",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30684"
},
{
"name": "CVE-2021-30737",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30737"
},
{
"name": "CVE-2021-30708",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30708"
},
{
"name": "CVE-2020-36225",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36225"
},
{
"name": "CVE-2021-30701",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30701"
},
{
"name": "CVE-2021-30743",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30743"
},
{
"name": "CVE-2021-30726",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30726"
},
{
"name": "CVE-2021-30676",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30676"
},
{
"name": "CVE-2021-30671",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30671"
},
{
"name": "CVE-2020-36224",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36224"
},
{
"name": "CVE-2021-30692",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30692"
},
{
"name": "CVE-2021-30677",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30677"
},
{
"name": "CVE-2021-30714",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30714"
},
{
"name": "CVE-2021-30702",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30702"
},
{
"name": "CVE-2021-30727",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30727"
},
{
"name": "CVE-2021-21779",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21779"
},
{
"name": "CVE-2021-1884",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1884"
},
{
"name": "CVE-2020-36228",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36228"
},
{
"name": "CVE-2020-36227",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36227"
},
{
"name": "CVE-2021-30723",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30723"
},
{
"name": "CVE-2021-30729",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30729"
},
{
"name": "CVE-2021-30719",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30719"
},
{
"name": "CVE-2021-30696",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30696"
},
{
"name": "CVE-2021-30712",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30712"
},
{
"name": "CVE-2021-30688",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30688"
},
{
"name": "CVE-2021-30739",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30739"
},
{
"name": "CVE-2021-30680",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30680"
},
{
"name": "CVE-2021-30689",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30689"
},
{
"name": "CVE-2021-30746",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30746"
},
{
"name": "CVE-2021-30744",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30744"
},
{
"name": "CVE-2020-36223",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36223"
},
{
"name": "CVE-2021-30669",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30669"
},
{
"name": "CVE-2021-30699",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30699"
},
{
"name": "CVE-2021-30728",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30728"
},
{
"name": "CVE-2021-30736",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30736"
},
{
"name": "CVE-2020-36229",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36229"
},
{
"name": "CVE-2021-30695",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30695"
},
{
"name": "CVE-2021-30705",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30705"
},
{
"name": "CVE-2021-30663",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30663"
},
{
"name": "CVE-2021-30683",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30683"
},
{
"name": "CVE-2021-30691",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30691"
},
{
"name": "CVE-2021-30725",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30725"
},
{
"name": "CVE-2021-30665",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30665"
},
{
"name": "CVE-2021-30721",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30721"
},
{
"name": "CVE-2021-30693",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30693"
},
{
"name": "CVE-2021-30682",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30682"
},
{
"name": "CVE-2021-30674",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30674"
},
{
"name": "CVE-2021-30694",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30694"
},
{
"name": "CVE-2021-1883",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1883"
},
{
"name": "CVE-2021-30673",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30673"
},
{
"name": "CVE-2021-30718",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30718"
},
{
"name": "CVE-2021-30713",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30713"
},
{
"name": "CVE-2021-30717",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30717"
},
{
"name": "CVE-2020-36226",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36226"
},
{
"name": "CVE-2021-30687",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30687"
},
{
"name": "CVE-2020-36222",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36222"
},
{
"name": "CVE-2021-30709",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30709"
},
{
"name": "CVE-2021-30690",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30690"
},
{
"name": "CVE-2021-30686",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30686"
},
{
"name": "CVE-2021-30716",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30716"
},
{
"name": "CVE-2021-30735",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30735"
},
{
"name": "CVE-2021-30679",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30679"
},
{
"name": "CVE-2021-30734",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30734"
},
{
"name": "CVE-2021-30697",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30697"
},
{
"name": "CVE-2021-30698",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30698"
},
{
"name": "CVE-2021-30720",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30720"
},
{
"name": "CVE-2021-30740",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30740"
},
{
"name": "CVE-2021-23841",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23841"
},
{
"name": "CVE-2021-30685",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30685"
},
{
"name": "CVE-2021-30738",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30738"
},
{
"name": "CVE-2021-30749",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30749"
},
{
"name": "CVE-2021-30704",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30704"
},
{
"name": "CVE-2021-30741",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30741"
},
{
"name": "CVE-2021-30707",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30707"
},
{
"name": "CVE-2021-30710",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30710"
},
{
"name": "CVE-2021-30700",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30700"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-398",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-05-25T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire, un d\u00e9ni de service et un contournement de\nla politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212534 du 24 mai 2021",
"url": "https://support.apple.com/en-us/HT212534"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212528 du 24 mai 2021",
"url": "https://support.apple.com/en-us/HT212528"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212531 du 24 mai 2021",
"url": "https://support.apple.com/en-us/HT212531"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212533 du 24 mai 2021",
"url": "https://support.apple.com/en-us/HT212533"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212530 du 24 mai 2021",
"url": "https://support.apple.com/en-us/HT212530"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212529 du 24 mai 2021",
"url": "https://support.apple.com/en-us/HT212529"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212532 du 24 mai 2021",
"url": "https://support.apple.com/en-us/HT212532"
}
]
}
CERTFR-2021-AVI-389
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité a été découverte dans Apple Boot Camp. Elle permet à un attaquant de provoquer une élévation de privilèges.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneReferences
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Boot Camp versions ant\u00e9rieures \u00e0 6.1.14",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-30675",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30675"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-389",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-05-18T00:00:00.000000"
}
],
"risks": [
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Apple Boot Camp. Elle permet \u00e0\nun attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans Apple Boot Camp",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212517 du 17 mai 2021",
"url": "https://support.apple.com/fr-fr/HT212517"
}
]
}
CERTFR-2021-AVI-336
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "macOS Big Sur versions ant\u00e9rieures \u00e0 11.3.1",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 14.5.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions ant\u00e9rieures \u00e0 7.4.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 14.5.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 12.5.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-30666",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30666"
},
{
"name": "CVE-2021-30663",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30663"
},
{
"name": "CVE-2021-30661",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30661"
},
{
"name": "CVE-2021-30665",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30665"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-336",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-05-04T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nElles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code\narbitraire \u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212341 du 03 mai 2021",
"url": "https://support.apple.com/fr-fr/HT212341"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212336 du 03 mai 2021",
"url": "https://support.apple.com/fr-fr/HT212336"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212335 du 03 mai 2021",
"url": "https://support.apple.com/fr-fr/HT212335"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212339 du 03 mai 2021",
"url": "https://support.apple.com/fr-fr/HT212339"
}
]
}
CERTFR-2021-AVI-314
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | Safari | Safari versions antérieures à 14.1 | ||
| Apple | macOS | macOS Mojave sans le correctif de sécurité 2021-003 | ||
| Apple | N/A | tvOS versions antérieures à 14.5 | ||
| Apple | macOS | macOS Big Sur versions antérieures à 11.3 | ||
| Apple | N/A | iTunes versions antérieures à 12.11.3 sur Windows | ||
| Apple | N/A | watchOS versions antérieures à 7.4 | ||
| Apple | N/A | iCloud pour Windows versions antérieures à 12.3 | ||
| Apple | N/A | iOS et iPadOS versions antérieures à 14.5 | ||
| Apple | macOS | macOS Catalina sans le correctif de sécurité 2021-002 | ||
| Apple | N/A | Xcode versions antérieures à 12.5 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Safari versions ant\u00e9rieures \u00e0 14.1",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Mojave sans le correctif de s\u00e9curit\u00e9 2021-003",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "tvOS versions ant\u00e9rieures \u00e0 14.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Big Sur versions ant\u00e9rieures \u00e0 11.3",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iTunes versions ant\u00e9rieures \u00e0 12.11.3 sur Windows",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions ant\u00e9rieures \u00e0 7.4",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iCloud pour Windows versions ant\u00e9rieures \u00e0 12.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS et iPadOS versions ant\u00e9rieures \u00e0 14.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Catalina sans le correctif de s\u00e9curit\u00e9 2021-002",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Xcode versions ant\u00e9rieures \u00e0 12.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-1815",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1815"
},
{
"name": "CVE-2021-1835",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1835"
},
{
"name": "CVE-2021-1853",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1853"
},
{
"name": "CVE-2021-1784",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1784"
},
{
"name": "CVE-2020-3838",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3838"
},
{
"name": "CVE-2021-1855",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1855"
},
{
"name": "CVE-2021-1831",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1831"
},
{
"name": "CVE-2021-1839",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1839"
},
{
"name": "CVE-2021-1857",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1857"
},
{
"name": "CVE-2021-1847",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1847"
},
{
"name": "CVE-2021-1877",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1877"
},
{
"name": "CVE-2021-1829",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1829"
},
{
"name": "CVE-2021-1854",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1854"
},
{
"name": "CVE-2021-1861",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1861"
},
{
"name": "CVE-2021-1830",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1830"
},
{
"name": "CVE-2020-8285",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8285"
},
{
"name": "CVE-2021-30657",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30657"
},
{
"name": "CVE-2021-1828",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1828"
},
{
"name": "CVE-2021-1811",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1811"
},
{
"name": "CVE-2021-1844",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1844"
},
{
"name": "CVE-2021-1820",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1820"
},
{
"name": "CVE-2020-8037",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8037"
},
{
"name": "CVE-2021-30655",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30655"
},
{
"name": "CVE-2020-8286",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8286"
},
{
"name": "CVE-2021-1810",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1810"
},
{
"name": "CVE-2021-1880",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1880"
},
{
"name": "CVE-2021-1884",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1884"
},
{
"name": "CVE-2021-1852",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1852"
},
{
"name": "CVE-2021-1813",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1813"
},
{
"name": "CVE-2021-1837",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1837"
},
{
"name": "CVE-2021-1875",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1875"
},
{
"name": "CVE-2021-1860",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1860"
},
{
"name": "CVE-2021-1826",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1826"
},
{
"name": "CVE-2021-1797",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1797"
},
{
"name": "CVE-2021-1851",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1851"
},
{
"name": "CVE-2021-1817",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1817"
},
{
"name": "CVE-2021-21300",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21300"
},
{
"name": "CVE-2021-1814",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1814"
},
{
"name": "CVE-2021-1865",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1865"
},
{
"name": "CVE-2021-1825",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1825"
},
{
"name": "CVE-2021-1822",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1822"
},
{
"name": "CVE-2021-30661",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30661"
},
{
"name": "CVE-2021-1872",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1872"
},
{
"name": "CVE-2021-1816",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1816"
},
{
"name": "CVE-2021-1843",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1843"
},
{
"name": "CVE-2021-1868",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1868"
},
{
"name": "CVE-2021-30658",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30658"
},
{
"name": "CVE-2021-1836",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1836"
},
{
"name": "CVE-2021-1739",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1739"
},
{
"name": "CVE-2021-1864",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1864"
},
{
"name": "CVE-2021-1840",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1840"
},
{
"name": "CVE-2021-1874",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1874"
},
{
"name": "CVE-2021-1808",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1808"
},
{
"name": "CVE-2021-1832",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1832"
},
{
"name": "CVE-2021-1882",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1882"
},
{
"name": "CVE-2021-1883",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1883"
},
{
"name": "CVE-2021-1881",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1881"
},
{
"name": "CVE-2021-1876",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1876"
},
{
"name": "CVE-2021-1878",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1878"
},
{
"name": "CVE-2021-1809",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1809"
},
{
"name": "CVE-2021-30656",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30656"
},
{
"name": "CVE-2021-1873",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1873"
},
{
"name": "CVE-2021-1846",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1846"
},
{
"name": "CVE-2021-1885",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1885"
},
{
"name": "CVE-2021-1841",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1841"
},
{
"name": "CVE-2021-1740",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1740"
},
{
"name": "CVE-2021-30653",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30653"
},
{
"name": "CVE-2021-1867",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1867"
},
{
"name": "CVE-2021-1806",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1806"
},
{
"name": "CVE-2021-1858",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1858"
},
{
"name": "CVE-2021-1859",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1859"
},
{
"name": "CVE-2021-30660",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30660"
},
{
"name": "CVE-2021-30652",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30652"
},
{
"name": "CVE-2021-1848",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1848"
},
{
"name": "CVE-2020-7463",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-7463"
},
{
"name": "CVE-2020-27942",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27942"
},
{
"name": "CVE-2021-1824",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1824"
},
{
"name": "CVE-2021-1834",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1834"
},
{
"name": "CVE-2021-1849",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1849"
},
{
"name": "CVE-2021-1805",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1805"
},
{
"name": "CVE-2021-1807",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1807"
},
{
"name": "CVE-2021-30659",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30659"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-314",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-04-27T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance\net un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212325 du 26 avril 2021",
"url": "https://support.apple.com/fr-fr/HT212325"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212327 du 26 avril 2021",
"url": "https://support.apple.com/fr-fr/HT212327"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212317 du 26 avril 2021",
"url": "https://support.apple.com/fr-fr/HT212317"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212318 du 26 avril 2021",
"url": "https://support.apple.com/fr-fr/HT212318"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212324 du 26 avril 2021",
"url": "https://support.apple.com/fr-fr/HT212324"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212326 du 26 avril 2021",
"url": "https://support.apple.com/fr-fr/HT212326"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212319 du 26 avril 2021",
"url": "https://support.apple.com/fr-fr/HT212319"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212323 du 26 avril 2021",
"url": "https://support.apple.com/fr-fr/HT212323"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212320 du 26 avril 2021",
"url": "https://support.apple.com/fr-fr/HT212320"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212321 du 26 avril 2021",
"url": "https://support.apple.com/fr-fr/HT212321"
}
]
}
CERTFR-2021-AVI-224
Vulnerability from certfr_avis - Published: - Updated:
Une vulnérabilité a été découverte dans les produits Apple. Elle permet à un attaquant de provoquer une injection de code indirecte à distance (XSS). L'éditeur indique que cette vulnérabilité semble activement exploitée.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iOS versions 12.x ant\u00e9rieures \u00e0 12.5.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions ant\u00e9rieures \u00e0 7.3.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 14.4.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions 14.x ant\u00e9rieures \u00e0 14.4.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-1879",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1879"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-224",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-03-29T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Apple. Elle permet\n\u00e0 un attaquant de provoquer une injection de code indirecte \u00e0 distance\n(XSS). L\u0027\u00e9diteur indique que cette vuln\u00e9rabilit\u00e9 semble activement\nexploit\u00e9e.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans les produits Apple",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212256 du 26 mars 2021",
"url": "https://support.apple.com/fr-fr/HT212256"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212258 du 26 mars 2021",
"url": "https://support.apple.com/fr-fr/HT212258"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Apple HT212257 du 26 mars 2021",
"url": "https://support.apple.com/fr-fr/HT212257"
}
]
}