{"metadata": {"vulnerability": "CVE-2022-26763", "count": 54, "kinds": {"milestone": 7, "sighting": 10, "kev": 0, "other": 37}}, "data": [{"timestamp": "2022-03-08T00:00:00Z", "date_only": false, "value": "2022-03-08T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-26763", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-05-16T00:00:00Z", "date_only": false, "value": "2022-05-16T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1320", "record": "VAR-202205-1320", "field": "sources_release_date.data.4.date"}, {"timestamp": "2022-05-16T22:00:00Z", "date_only": false, "value": "2022-05-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-05-16T22:00:00Z", "date_only": false, "value": "2022-05-16T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-05-16T22:00:00Z", "date_only": false, "value": "2022-05-16T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-05-17T00:00:00Z", "date_only": false, "value": "2022-05-17T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-466", "record": "CERTFR-2022-AVI-466", "field": "last_revision_date"}, {"timestamp": "2022-05-17T00:00:00Z", "date_only": false, "value": "2022-05-17T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-467", "record": "CERTFR-2022-AVI-467", "field": "last_revision_date"}, {"timestamp": "2022-05-17T00:00:00Z", "date_only": false, "value": "2022-05-17T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-466", "record": "CERTFR-2022-AVI-466", "field": "initial_release_date"}, {"timestamp": "2022-05-17T00:00:00Z", "date_only": false, "value": "2022-05-17T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-467", "record": "CERTFR-2022-AVI-467", "field": "initial_release_date"}, {"timestamp": "2022-05-17T00:00:00Z", "date_only": false, "value": "2022-05-17T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-466", "record": "CERTFR-2022-AVI-466", "field": "revisions.0.revision_date"}, {"timestamp": "2022-05-17T00:00:00Z", "date_only": false, "value": "2022-05-17T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-467", "record": "CERTFR-2022-AVI-467", "field": "revisions.0.revision_date"}, {"timestamp": "2022-05-17T17:06:32Z", "date_only": false, "value": "2022-05-17T17:06:32", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1320", "record": "VAR-202205-1320", "field": "sources_release_date.data.1.date"}, {"timestamp": "2022-05-17T17:06:48Z", "date_only": false, "value": "2022-05-17T17:06:48", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1320", "record": "VAR-202205-1320", "field": "sources_release_date.data.2.date"}, {"timestamp": "2022-05-26T00:00:00Z", "date_only": false, "value": "2022-05-26T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1320", "record": "VAR-202205-1320", "field": "sources_release_date.data.0.date"}, {"timestamp": "2022-05-26T19:19:37Z", "date_only": false, "value": "2022-05-26T19:19:37.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-26763", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-05-26T19:19:37Z", "date_only": false, "value": "2022-05-26T19:19:37.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apple", "record": "CVE-2022-26763", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-05-26T20:15:00Z", "date_only": false, "value": "2022-05-26T20:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5P4Q-5JW2-F5JW", "record": "GHSA-5P4Q-5JW2-F5JW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-05-26T20:15:00Z", "date_only": false, "value": "2022-05-26T20:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-26763", "record": "GSD-2022-26763", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-05-26T20:15:09.527Z", "date_only": false, "value": "2022-05-26T20:15:09.527000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1320", "record": "VAR-202205-1320", "field": "sources_release_date.data.5.date"}, {"timestamp": "2022-05-26T20:15:09.527Z", "date_only": false, "value": "2022-05-26T20:15:09.527", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-26763", "record": "FKIE_CVE-2022-26763", "field": "published"}, {"timestamp": "2022-05-27T00:00:30Z", "date_only": false, "value": "2022-05-27T00:00:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5P4Q-5JW2-F5JW", "record": "GHSA-5P4Q-5JW2-F5JW", "field": "published"}, {"timestamp": "2022-05-27T00:14:32Z", "date_only": false, "value": "2022-05-27T00:14:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/43451", "record": "CVE-2022-26763", "field": "creation_timestamp", "uuid": "6a9c800c-28e3-4bcb-916e-707eedb1e25a", "content": "\u203c CVE-2022-26763 \u203c\n\nAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A malicious application may be able to execute arbitrary code with system privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/43451"}, {"timestamp": "2022-06-08T00:00:00Z", "date_only": false, "value": "2022-06-08T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1320", "record": "VAR-202205-1320", "field": "sources_update_date.data.0.date"}, {"timestamp": "2022-06-08T12:49:00Z", "date_only": false, "value": "2022-06-08T12:49Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-26763", "record": "GSD-2022-26763", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-06-09T00:00:26Z", "date_only": false, "value": "2022-06-09T00:00:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5P4Q-5JW2-F5JW", "record": "GHSA-5P4Q-5JW2-F5JW", "field": "modified"}, {"timestamp": "2022-07-04T11:00:13Z", "date_only": false, "value": "2022-07-04T11:00:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6332", "record": "CVE-2022-26763", "field": "creation_timestamp", "uuid": "f05b336a-aa40-4a69-9f19-3cf221e149c6", "content": "#exploit\nGet root on macOS 12.3.1:\nProof-of-concepts for Linus Henze's CoreTrust and DriverKit bugs (CVE-2022-26766, CVE-2022-26763)\nhttps://worthdoingbadly.com/coretrust", "url": "https://t.me/CyberSecurityTechnologies/6332"}, {"timestamp": "2022-07-06T18:40:57Z", "date_only": false, "value": "2022-07-06T18:40:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/apexhacks/93", "record": "CVE-2022-26763", "field": "creation_timestamp", "uuid": "8432a1cc-439a-424d-ab5c-d23a08dfd132", "content": "\ud83d\udda5Get root on macOS 12.3.1: proof-of-concepts for Linus Henze's CoreTrust and DriverKit bugs (CVE-2022-26766, CVE-2022-26763)", "url": "https://t.me/apexhacks/93"}, {"timestamp": "2022-07-06T18:40:57Z", "date_only": false, "value": "2022-07-06T18:40:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/apexhacks/95", "record": "CVE-2022-26763", "field": "creation_timestamp", "uuid": "89cc198f-7162-43ed-a9af-39a3633c9409", "content": "PCIDriverKit proof-of-concept for CVE-2022-26763", "url": "https://t.me/apexhacks/95"}, {"timestamp": "2022-07-17T08:53:31Z", "date_only": false, "value": "2022-07-17T08:53:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/V3_8N6ZUWQ9rL5z501KvYGFV3sn8qhA78QOreSFS4fpoDQ", "record": "CVE-2022-26763", "field": "creation_timestamp", "uuid": "fb7799e1-eab8-4d23-a6b4-6ea18f4a0879"}, {"timestamp": "2022-07-17T22:52:10Z", "date_only": false, "value": "2022-07-17T22:52:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/848", "record": "CVE-2022-26763", "field": "creation_timestamp", "uuid": "fb717dfe-ef22-4848-818d-96d9ee9e652b", "content": "Updates On Hackbyte Forum:-\n\n\ud83d\udcccLeman2 Leak\n\ud83d\udccc26M ESKIMI.COM DATABASE\n\ud83d\udcccEtisalcom Bahrain Telecom Bahrain\n\ud83d\udcccLock Screen Bypass Exploit of Android Devices (CVE-2022\u201320006)\n\ud83d\udcccSonarQube_Data_Center\n\ud83d\udcccProton_Privacy_Decoded: Script to Explore ProtonMail and Vpn\n\ud83d\udcccRandy: A pre-authenticated RCE exploit for Inductive Automation Ignition\n\ud83d\udcccOnionWallet Leak\n\ud83d\udcccUAC bypass for x64 Windows 7 \u2013 11\n\ud83d\udcccDecompiler Explorer! Compare tools on the forefront of static analysis, now in your web browser!\n\ud83d\udcccAbuse Cloudflare Zerotrust for C2 channels\n\ud83d\udcccCobaltstrike_all_kits\n\ud83d\udcccBypass Windows Defender by utilizing malicious SMB requests inside MS Word Macro\n\ud83d\udcccHTB Business CTF 2022: Dirty Money\n\ud83d\udcccLEAK WORK.UA\n\ud83d\udcccTurniketov.net Leak\n\ud83d\udcccVK.com Leak 2022\n\ud83d\udcccKuban 1k b2b Leak\n\ud83d\udccc9k_doc_fr_selfie Kyc Leak\n\ud83d\udcccIDA Plugin to reconstruct .proto files used in the analyzed binary\n\ud83d\udcccLDAP shell\n\ud83d\udcccHiddenCPG - a vulnerable clone detection system\n\ud83d\udcccInvestigator - An online handy-recon tool.\n\ud83d\udcccBFAC - Burp Extension for BFAC (Advanced Backup-File Artifacts Testing for Web-Applications)\n\ud83d\udcccReoSploit - A Tool that Finds, Enumerates, and #exploits Reolink Cameras.\n\ud83d\udcccElectroMagnetic Mining Array (EMMA)\n\ud83d\udcccblindssl - Disable SSL certificate verification using eBPF\n\ud83d\udcccPCICrash - PCIDriverKit PoC for CVE-2022-26763 (exec arbitrary code w/ system privileges).\n\ud83d\udcccAntares - Cross-platform #SQL client.\n\ud83d\udcccFAME - Recursive acronym meaning \u201cFAME Automates Malware Evaluation\u201d.\n\ud83d\udcccActive Directory Attacks\n\ud83d\udcccCVE-2022-22047: Windows CSRSS Elevation of Privilege Zero-Day Vulnerability.\n\ud83d\udcccAccount hijacking using \u201cdirty dancing\u201d in sign-in OAuth-flows\n\n\ud83d\udc49\ud83c\udffb\ud83d\udc49\ud83c\udffb Updates:- https://bit.ly/3yRyah3 \ud83d\udc48\ud83c\udffb\ud83d\udc48\ud83c\udffb", "url": "https://t.me/crackcodes/848"}, {"timestamp": "2022-08-16T22:00:00Z", "date_only": false, "value": "2022-08-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-09-20T22:00:00Z", "date_only": false, "value": "2022-09-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2022-09-22T22:00:00Z", "date_only": false, "value": "2022-09-22T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2022-09-25T22:00:00Z", "date_only": false, "value": "2022-09-25T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2022-10-11T00:00:00Z", "date_only": false, "value": "2022-10-11T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1320", "record": "VAR-202205-1320", "field": "sources_update_date.data.2.date"}, {"timestamp": "2022-11-21T23:00:00Z", "date_only": false, "value": "2022-11-21T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2023-06-21T22:00:00Z", "date_only": false, "value": "2023-06-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2023-06-21T22:00:00Z", "date_only": false, "value": "2023-06-21T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-08-22T00:00:00Z", "date_only": false, "value": "2023-08-22T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1320", "record": "VAR-202205-1320", "field": "sources_release_date.data.3.date"}, {"timestamp": "2023-08-22T06:13:00Z", "date_only": false, "value": "2023-08-22T06:13:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1320", "record": "VAR-202205-1320", "field": "sources_update_date.data.1.date"}, {"timestamp": "2023-12-13T01:19:39.258Z", "date_only": false, "value": "2023-12-13T01:19:39.258494Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-26763", "record": "GSD-2022-26763", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T05:11:44.915Z", "date_only": false, "value": "2024-08-03T05:11:44.915Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-26763", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:33:27.405Z", "date_only": false, "value": "2024-08-15T17:33:27.405+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1057", "record": "WID-SEC-W-2022-1057", "field": "document.tracking.generator.date"}, {"timestamp": "2025-05-30T19:14:04.055Z", "date_only": false, "value": "2025-05-30T19:14:04.055833Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-26763", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-05-30T19:14:04.055Z", "date_only": false, "value": "2025-05-30T19:14:04.055833Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-26763", "record": "FKIE_CVE-2022-26763", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-05-30T19:14:12.778Z", "date_only": false, "value": "2025-05-30T19:14:12.778Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-26763", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-30T19:14:12.778Z", "date_only": false, "value": "2025-05-30T19:14:12.778Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-26763", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-30T20:15:28.760Z", "date_only": false, "value": "2025-05-30T20:15:28.760000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-1320", "record": "VAR-202205-1320", "field": "sources_update_date.data.3.date"}, {"timestamp": "2025-05-31T21:28:04.835Z", "date_only": false, "value": "2025-05-31T21:28:04.835000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202205-1320", "record": "VAR-202205-1320", "field": "last_update_date"}, {"timestamp": "2026-06-17T04:35:45.653Z", "date_only": false, "value": "2026-06-17T04:35:45.653", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-26763", "record": "FKIE_CVE-2022-26763", "field": "lastModified"}, {"timestamp": "2026-07-29T12:02:39.306Z", "date_only": false, "value": "2026-07-29T12:02:39.306915Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2599", "record": "CVE-2022-26763", "field": "creation_timestamp", "uuid": "70a1970f-0b98-4d66-b37b-3b0fc7bfc233", "url": "https://t.me/reverseame/2599"}, {"timestamp": "2026-07-30T00:02:35.551Z", "date_only": false, "value": "2026-07-30T00:02:35.551280Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2599", "record": "CVE-2022-26763", "field": "creation_timestamp", "uuid": "17addd97-9f14-4b1e-8f81-1697ef6c8fa5", "url": "https://t.me/reverseame/2599"}, {"timestamp": "2026-08-02T23:16:06.807Z", "date_only": false, "value": "2026-08-02T23:16:06.807703Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/2599", "record": "CVE-2022-26763", "field": "creation_timestamp", "uuid": "f9f4c345-6362-430f-8b8c-1af4ee88a170", "url": "https://t.me/reverseame/2599"}, {"timestamp": "2026-08-03T00:26:58.561Z", "date_only": false, "value": "2026-08-03T00:26:58.561486Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/2599", "record": "CVE-2022-26763", "field": "creation_timestamp", "uuid": "0bceca56-0d39-4b57-a7dd-35bd5a186b60", "url": "https://t.me/reverseame/2599"}]}