https://support.apple.com/en-us/HT213257

https://support.apple.com/en-us/HT213254

https://support.apple.com/en-us/HT213258

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.4 Monterey. It is, therefore, affected by multiple vulnerabilities :

  - Exploitation of this vulnerability may lead to memory corruption issue. (CVE-2018-25032)

  - A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser. (CVE-2021-44790)

  - Exploitation of this vulnerability may lead to arbitrary code execution. (CVE-2021-45444)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 15.5. It is, therefore, affected by multiple vulnerabilities, including the following:

  - valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. (CVE-2022-23308)

  - A vulnerability in WebKit may lead to code execution when processing malicious web content due to a     memory corruption issue. (CVE-2022-26700)

  - A vulnerability in AppleGraphicsControl that may lead to code execution when processing malicious images     due to a memory corruption issue. (CVE-2022-26751:)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
161410	macOS 12.x < 12.4 (HT213257)	Nessus	MacOS X Local Security Checks	critical
161384	Apple iOS < 15.5 Multiple Vulnerabilities (HT213258)	Nessus	Mobile Devices	critical

CVE-2022-26737

high

Tenable Plugins

critical

critical