7954 matches found
CVE-2022-32947
CVE-2022-32947 affects Apple platforms (iOS/iPadOS/macOS) and is tied to memory handling issues in GPU/Kernel components that could allow an app to execute arbitrary code with kernel privileges. Public documentation confirms the vulnerability could enable kernel-level code execution and that patc...
CVE-2022-32895
A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system...
CVE-2022-42799
CVE-2022-42799 describes a UI spoofing vulnerability in WebKitGTK/WebKit-based browsers when visiting a malicious site. The Apple OS updates fixed this (tvOS/macOS/iOS/watchOS Safari/WebKit) to mitigate UI spoofing. Connected advisories show WebKitGTK/WebKit fixes: Debian/Ubuntu advisories (CVE-2...
CVE-2022-42809
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted gcx file may lead to unexpected app termination or arbitrary code execution...
CVE-2022-42795
A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 16, iOS 16, macOS Ventura 13, watchOS 9. Processing a maliciously crafted image may lead to arbitrary code execution...
CVE-2022-32936
CVE-2022-32936 is an out-of-bounds read vulnerability in macOS whose impact could allow an app to disclose kernel memory. The issue was mitigated by improved input validation and is fixed in macOS Ventura 13 (Apple security content entry HT213488). The CVSS metrics indicate a locally exploitable ...
CVE-2022-32947
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to execute arbitrary code with kernel privileges...
CVE-2022-32928
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. A user in a privileged network position may be able to intercept mail credentials...
CVE-2022-42831
CVE-2022-42831 describes a race condition in Apple devices that could allow an app with root privileges to execute arbitrary code with kernel privileges. Apple fixes are noted in iOS 16.1 and iPadOS 16, and macOS Ventura 13. The initial description states kernel-level impact but does not provide ...
CVE-2022-32928
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. A user in a privileged network position may be able to intercept mail credentials...
CVE-2022-42800
This issue was addressed with improved checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. A user may be able to cause unexpected app termination or arbitrary code execution...
CVE-2022-32890
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. A sandboxed process may be able to circumvent sandbox restrictions...
CVE-2022-32890
CVE-2022-32890 affects macOS (notably macOS Ventura 13). The issue is described as a logic flaw that could allow a sandboxed process to circumvent sandbox restrictions. Apple documents update fixed in Ventura 13. Remediation: update to macOS Ventura 13 or later. Exploitation details are not provi...
CVE-2022-42815
CVE-2022-42815 concerns macOS; multiple sources indicate a data-access issue resolved by Apple in macOS Ventura 13. The Apple/NTD entries show CVE-2022-42815 affecting Mail with an impact on accessing user data, and NVD confirms a fix in Ventura 13. There is no public exploit detail in the provid...
CVE-2022-32867
CVE-2022-32867 affects Apple iOS (Crash Reporter data handling) and macOS Ventura 13, where a user with physical access could read past diagnostic logs. Apple fixes: iOS 16 and macOS Ventura 13, per CVE context; CVSS shown as LOW (PHYSICAL access, no user interaction). No exploitation details are...
CVE-2022-32865
The issue was addressed with improved memory handling. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges...
CVE-2022-32867
This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS Ventura 13. A user with physical access to an iOS device may be able to read past diagnostic logs...
CVE-2022-32915
CVE-2022-32915 is a type-confusion vulnerability fixed in macOS Ventura 13. The NVD/NIST entry states: an attacker may execute arbitrary code with kernel privileges via a local vulnerability. Apple’s security updates HT213604/HT213488 corroborate the presence of kernel‑level issues addressed in V...
CVE-2022-42823
A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may lead to arbitrary code execution...