CVE-2022-26757 The use after free issue was fixed with improved memory management in tvOS 15.5, iOS 15.5, iPadOS 15.5, watchOS 8.6, and macOS Big Sur 11.6.6.

This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-005 Catalina, watchOS 9.1, macOS Mojave 12.5. An application may be able to bypass user input validation.

This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-006 Catalina, watchOS 10.0, macOS High Sierra 13.1. An application may be able to bypass certificate validation.

This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-007 Catalina, watchOS 11.0, macOS Catalina 13.1. An application may have been given access to system privileges.

This issue is fixed in iOS 15.5, watchOS 5.1, tvOS 15.5, and macOS Mojave 12.5. An application may be able to obtain sensitive information.

This issue is fixed in iOS 15.5, watchOS 5.1, tvOS 15.5, and macOS High Sierra 13.1. An application may be able to execute arbitrary code with kernel privileges.

This issue is fixed in iOS 15.5, watchOS 5.1, tvOS 15.5, and macOS Catalina 13.1. An application may be able to bypass user input validation.

This issue is

Security Update 2023-001 Catalina

This issue is fixed in iOS 11.4, tvOS 11.4, watchOS 4.2, and macOS High Sierra 10.13.4. An application may be able to execute arbitrary code with kernel privileges.

Timeline

Published on: 05/26/2022 20:15:00 UTC
Last modified on: 06/20/2022 06:15:00 UTC

References

• https://support.apple.com/en-us/HT213256
• https://support.apple.com/en-us/HT213257
• https://support.apple.com/en-us/HT213254
• https://support.apple.com/en-us/HT213255
• https://support.apple.com/en-us/HT213253
• https://support.apple.com/en-us/HT213258
• http://packetstormsecurity.com/files/167517/XNU-Flow-Divert-Race-Condition-Use-After-Free.html
• https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-26757