CVE-2022-42809

CVE-2022-42809 affects macOS Ventura 13 and related macOS builds. The issue arises from how a maliciously crafted gcx file is processed, due to a memory handling vulnerability that can lead to unexpected application termination or arbitrary code execution. The Red Hat and Apple security pages con...

CVE-2022-32918

CVE-2022-32918 affects Apple platforms (iOS 16 and macOS Ventura 13). The issue allows an app to bypass Privacy preferences due to improper data protection handling. Apple notes the vulnerability was fixed in iOS 16 and macOS Ventura 13, restoring proper privacy controls. The CVE entry reflects a...

CVE-2022-42832

A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges...

CVE-2022-32918

This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to bypass Privacy preferences...

CVE-2022-42788

A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in macOS Ventura 13. A malicious application may be able to read sensitive location information...

CVE-2022-42806

A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-32865

CVE-2022-32865 affects Apple platforms and is described in official Apple security content as a kernel‑level issue mitigated by memory handling improvements. According to the vulnerability entry, the flaw is fixed in iOS 16 and macOS Ventura 13, with the potential to allow an app to execute arbit...

CVE-2022-42798

The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. Parsing a maliciously crafted audio file may lead to disclosure of user...

CVE-2022-42820

CVE-2022-42820 is a memory corruption issue affecting Apple IOHIDFamily components, addressed by Apple in the macOS Ventura 13 security updates and iOS 16.1 / iPadOS 16. The issue could lead to an app termination or arbitrary code execution. The official Apple advisory references IOHIDFamily and ...

CVE-2022-42788

CVE-2022-42788 refers to a permissions issue in macOS Find My that could allow a malicious application to read sensitive location information. The root cause is insufficient permission validation, and Apple addressed it by improving permission checks. The vulnerability is fixed in macOS Ventura 1...

CVE-2022-26730

A memory corruption issue existed in the processing of ICC profiles. This issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2022-32915

A type confusion issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-32827

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to cause a denial-of-service...

CVE-2022-32938

CVE-2022-32938 affects Apple Shortcuts handling of directory paths. A parsing issue allowed a shortcut to check for the existence of an arbitrary path on the file system. Affected products/versions: iOS 16.1 and iPadOS 16; macOS Ventura 13. The issue is mitigated by the vendor’s fix through impro...

CVE-2022-32926

CVE-2022-32926 affects Apple platforms and was remediated by improved bounds checks. The issue could allow an app with root privileges to execute arbitrary code with kernel privileges. Notable affected systems and fixed releases include: iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1, iPadOS 16, tvOS 16....

CVE-2022-32899

CVE-2022-32899 affects Apple Neural Engine and related Apple OS components; the issue could allow an app to execute arbitrary code with kernel privileges. Apple fixed it in iOS 15.7, iPadOS 15.7, iOS 16, macOS Ventura 13, and watchOS 9. The description notes bug fix via improved memory handling. ...

CVE-2022-42813

A certificate validation issue existed in the handling of WKWebView. This issue was addressed with improved validation. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. Processing a maliciously crafted certificate may lead to arbitrary code execution...

CVE-2022-32827

CVE-2022-32827 is a memory corruption vulnerability in AppleAVD affecting macOS Ventura 13 and iOS prior to 16. The issue could allow an app to cause a denial-of-service. Apple fixed it in iOS 16 and macOS Ventura 13 by improved state management. No exploit details are provided in the connected d...

CVE-2022-42814

CVE-2022-42814 describes a logic issue in macOS that could allow an app to access user‑sensitive data. The Initial and connected records confirm this as a macOS vulnerability fixed in macOS Ventura 13. The primary affected component is macOS (Apple’s OS), with the fix implemented in Ventura 13. T...

CVE-2022-42811

An access issue was addressed with additional sandbox restrictions. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to access user-sensitive data...