Design/Logic Flaw

An access issue was addressed with additional sandbox restrictions on third-party apps. This issue is fixed in macOS Ventura 13. An app may be able to record audio with paired AirPods...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in versions of Apple macOS prior to Ventura 13, which can be exploited by an attacker to record audio using paired AirPods . The following products and versions are affected: m...

CVE-2022-32945

CVE-2022-32945 affects macOS, with Apple noting an access issue that could allow an app to record audio via paired AirPods. The root cause is tied to sandbox restrictions on third‑party apps; Apple states the vulnerability is fixed in macOS Ventura 13. The CVE appears in multiple Apple advisories...

CVE-2022-32945

An access issue was addressed with additional sandbox restrictions on third-party apps. This issue is fixed in macOS Ventura 13. An app may be able to record audio with paired AirPods...

CVE-2022-46348

creationtimestamp| type| source ---|---|--- 2022-12-13 18:28:09+00:00| seen| https://t.me/cibsecurity/54438...

CVE-2022-46355

creationtimestamp| type| source ---|---|--- 2022-12-13 18:28:08+00:00| seen| https://t.me/cibsecurity/54437...

CVE-2022-41280

creationtimestamp| type| source ---|---|--- 2022-12-13 18:28:06+00:00| seen| https://t.me/cibsecurity/54435...

CVE-2022-41288

creationtimestamp| type| source ---|---|--- 2022-12-13 18:28:05+00:00| seen| https://t.me/cibsecurity/54434...

CVE-2022-41284

creationtimestamp| type| source ---|---|--- 2022-12-13 18:21:50+00:00| seen| https://t.me/cibsecurity/54405...

CVE-2022-20497

creationtimestamp| type| source ---|---|--- 2022-12-13 18:21:47+00:00| seen| https://t.me/cibsecurity/54402...

CVE-2022-46140

creationtimestamp| type| source ---|---|--- 2022-12-13 18:21:46+00:00| seen| Telegram/NzxtTxtdAC-0k8-BACZtgtqdVwFsWKNXSOt8QB9gJ7FkE...

CVE-2022-46061

creationtimestamp| type| source ---|---|--- 2022-12-13 16:21:39+00:00| seen| https://t.me/cibsecurity/54387 2025-04-22 04:03:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12800...

CVE-2022-20502

In GetResolvedMethod of entrypointutils-inl.h, there is a possible use after free due to a stale cache. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

CVE-2022-20500

In loadFromXml of ShortcutPackage.java, there is a possible crash on boot due to an uncaught exception. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11...

CVE-2022-20502

In GetResolvedMethod of entrypointutils-inl.h, there is a possible use after free due to a stale cache. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

CVE-2022-20488

In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20496

In setDataSource of initMediaExtractor.cpp, there is a possibility of arbitrary code execution due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-20475

In test of ResetTargetTaskHelper.java, there is a possible hijacking of any app which sets allowTaskReparenting="true" due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product...

CVE-2022-20484

In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20477

In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to show hidden notifications due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...