NVD disclosure day

Published threat advisories for May 26, 2022

CVE advisoryKnown Exploit

CVE-2022-22675

Apple Operating Systems Vulnerability Allows Code Execution

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A vulnerability in Apple operating systems could allow a malicious application to execute arbitrary code with kernel privileges. Apple is aware of reports that this issue may have been actively exploited, posing a business risk. Updates are available.

• CISA KEV

CVE advisoryKnown Exploit

CVE-2022-20821

Cisco IOS XR Network Device Data Access Vulnerability.

Halo Surface Signal: 2 out of 5 — less likely to be public-facing.

A vulnerability in Cisco IOS XR Software's health check feature could allow unauthorized remote access to an internal Redis database. This exposure may enable attackers to modify data or access information within the containerized environment, posing a risk to data integrity and confidentiality. The impact is contained

• CISA KEV