The version of Apple iOS running on the mobile device is prior to 15.4. It is, therefore, affected by multiple vulnerabilities, including the following:

  - A memory corruption issue in the Accelerate Framework that can lead to unexpected application termination     or arbitrary code execution when opening a maliciously crafted PDF. (CVE-2022-22633)

  - A buffer overflow condition in AVEVideoEncoder that allows an application to execute arbitrary code with     kernel privileges. (CVE-2022-22634)

  - An out-of-bounds write issue in AVEVideoEncoder that allows an application to execute arbitrary code with     kernel privileges. (CVE-2022-22636)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.3 Monterey. It is, therefore, affected by multiple vulnerabilities, including the following:
  - A use after free issue was addressed with improved memory management. Successful exploitation could   result in arbitrary code execution with kernel privileges (CVE-2022-22614). 

  - A logic issue was addressed with improved state management. Successful exploitation could result in   privilege escalation (CVE-2022-22632).

  - A null pointer dereference was addressed with improved validation. Successful exploitation could   result in a denial of service condition. (CVE-2022-22638).

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.6.5 Big Sur. It is, therefore, affected by multiple vulnerabilities including the following:

  - Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code     execution. (CVE-2022-22633)

  - Processing a maliciously crafted AppleScript binary may result in unexpected application termination or     disclosure of process memory. (CVE-2022-22626, CVE-2022-22627)

  - A local attacker may be able to view the previous logged in user's desktop from the fast user switching     screen. (CVE-2022-22579)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
158972	Apple iOS < 15.4 Multiple Vulnerabilities (HT213182)	Nessus	Mobile Devices	3/16/2022	4/8/2024	critical
159106	macOS 12.x < 12.3 (HT213183)	Nessus	MacOS X Local Security Checks	3/21/2022	11/3/2023	critical
159105	macOS 11.x < 11.6.5 Multiple Vulnerabilities (HT213184)	Nessus	MacOS X Local Security Checks	3/21/2022	11/8/2022	critical

Detections

Analytics

Plugins Search

critical

critical

critical