Apple Logic Pro X vulnerabilities

3 CVEs affecting Apple Logic Pro X, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-22664, published 2022-03-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-2372, published 2017-02-20. High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days. An issue was discovered in certain Apple products. GarageBand before 10.1.5 is affected. Logic Pro X before 10.3 is affected. The issue involves the "Projects" component, which allows remote…
CVE-2022-22664, published 2022-03-18. High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days. An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to…
CVE-2022-22657, published 2022-03-18. High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days. A memory initialization issue was addressed with improved memory handling. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead…