https://support.apple.com/en-us/HT213256

https://support.apple.com/en-us/HT213257

https://support.apple.com/en-us/HT213254

https://support.apple.com/en-us/HT213253

https://support.apple.com/en-us/HT213258

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.4 Monterey. It is, therefore, affected by multiple vulnerabilities :

  - Exploitation of this vulnerability may lead to memory corruption issue. (CVE-2018-25032)

  - A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser. (CVE-2021-44790)

  - Exploitation of this vulnerability may lead to arbitrary code execution. (CVE-2021-45444)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.6.6 Big Sur. It is, therefore, affected by multiple vulnerabilities including the following:

  - A logic issue in AppKit that may allow a malicious application to gain root privileges. (CVE-2022-22665)

  - A logic issue in Apache HTTP Server where it fails to close an inbound connection when errors are encountered     discarding the request body, exposing the server to HTTP Request Smuggling. (CVE-2022-22720)

  - A buffer overflow issue in the mod_lua component of Apache HTTP Server. (CVE-2021-44790)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 15.5. It is, therefore, affected by multiple vulnerabilities, including the following:

  - valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. (CVE-2022-23308)

  - A vulnerability in WebKit may lead to code execution when processing malicious web content due to a     memory corruption issue. (CVE-2022-26700)

  - A vulnerability in AppleGraphicsControl that may lead to code execution when processing malicious images     due to a memory corruption issue. (CVE-2022-26751:)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
161410	macOS 12.x < 12.4 (HT213257)	Nessus	MacOS X Local Security Checks	critical
161395	macOS 11.x < 11.6.6 Multiple Vulnerabilities (HT213256)	Nessus	MacOS X Local Security Checks	critical
161384	Apple iOS < 15.5 Multiple Vulnerabilities (HT213258)	Nessus	Mobile Devices	critical

CVE-2022-26706

medium

Tenable Plugins

critical

critical

critical