PatchTheCVEplist vulnerabilities and fixes
Recent CVEs affecting plist, with upgrade or downgrade steps. 1 tracked.
plist has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-02-17. Highest priority: CVE-2022-22912 (score 66/100).
- CVE-2022-22912 CRITICAL 9.8 UPGRADE Prototype pollution vulnerability via .parse() in Plist before v3.0.4 allows attackers to cause a Denial of Se
FAQ
How do I fix plist vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is plist being exploited right now?
None of the tracked plist CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which plist CVE should I patch first?
CVE-2022-22912 currently ranks highest (66/100): Prototype pollution vulnerability via .parse() in Plist before v3.0.4 allows attackers to cause a Denial of Se.