Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-26766
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A certificate parsing issue was addressed with improved checks. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A malicious app may be able to bypass signature validation.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Apple TV 4K和Apple TV HD 信任管理问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apple TV 4K和Apple TV HD都是美国苹果（Apple）公司的产品。Apple TV 4K是一款智能机顶盒。用于推出 4K Hdr 图像。Apple TV HD是一款高清电视机顶盒产品。 Apple TV 4K、Apple TV 4K（第 2 代）和 Apple TV HD 存在信任管理问题漏洞，该漏洞源于安全子系统中的证书解析问题。本地应用程序可以利用该漏洞绕过签名验证。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
ApplewatchOS unspecified ~ 8.6 -
ApplewatchOS unspecified ~ 15.5 -
ApplewatchOS unspecified ~ 2022 -
ApplewatchOS unspecified ~ 11.6 -
ApplewatchOS unspecified ~ 12.4 -
ApplewatchOS unspecified ~ 15.5 -
II. Public POCs for CVE-2022-26766
#POC DescriptionSource LinkShenlong Link
1Proof-of-concept for CVE-2022-26766 on macOS 12.3.1https://github.com/zhuowei/CoreTrustDemoPOC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2022-26766
Please Login to view more intelligence information
IV. Related Vulnerabilities
Same product: watchOS
Same vendor: Apple
V. Comments for CVE-2022-26766

No comments yet

Leave a comment