CVE-2022-42791

CVE-2022-42791 is a macOS-specific race condition vulnerability that was addressed by improving state handling. The issue could allow an app to execute arbitrary code with kernel privileges and is fixed in macOS Ventura 13. Affected component is the kernel-related path implicated by the race cond...

CVE-2022-32936

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13. An app may be able to disclose kernel memory...

CVE-2022-42796

CVE-2022-42796 concerns Apple platforms where the issue could allow an app to gain elevated privileges. It was mitigated by removing the vulnerable code and is fixed in iOS 15.7, iPadOS 15.7, and macOS Ventura 13.0. The description confirms no further exploitation details are provided in the give...

CVE-2022-32940

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-42831

A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges...

CVE-2022-26730

A memory corruption issue existed in the processing of ICC profiles. This issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2022-32865

The issue was addressed with improved memory handling. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-32905

CVE-2022-32905 affects macOS Ventura 13. It allows arbitrary code execution with system privileges when processing a maliciously crafted DMG file, due to insufficient validation of symlinks. The issue is fixed in macOS Ventura 13 via improved symlink validation; mitigation is to update to Ventura...

CVE-2022-42810

The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13. Processing a maliciously crafted USD file may disclose memory contents...

CVE-2022-42818

This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. A user in a privileged network position may be able to track user activity...

CVE-2022-42832

A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges...

CVE-2022-32892

An access issue was addressed with improvements to the sandbox. This issue is fixed in Safari 16, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Ventura 13. A sandboxed process may be able to circumvent sandbox restrictions...

CVE-2022-32935

A lock screen issue was addressed with improved state management. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16, macOS Ventura 13. A user may be able to view restricted content from the lock screen...

CVE-2022-32935

CVE-2022-32935 is an Apple lock-screen vulnerability addressed by updates across multiple Apple platforms. The issue allowed a user to view restricted content from the lock screen due to a state-management flaw. It affects iOS/iPadOS versions prior to the patches: iOS 15.7.1, iPadOS 15.7.1, iOS 1...

CVE-2022-32858

CVE-2022-32858 affects Apple platforms (iOS, macOS, watchOS) where a memory handling issue could allow an app to leak sensitive kernel state. The official description indicates the root cause is improved memory handling, and Apple fixed it in iOS 16, macOS Ventura 13, and watchOS 9. Connected sou...

CVE-2022-42830

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges...

CVE-2022-42791

A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-32898

CVE-2022-32898 is an Apple Kernel/Apple Neural Engine memory‑handling issue that could allow arbitrary code execution with kernel privileges. The connected exploit notes describe a memory corruption path in ANE’s program creation (ANE_ProgramCreate_gated) via an overflow of a planes array, contro...

CVE-2022-32892

CVE-2022-32892 describes an access issue in Apple’s sandbox that could let a sandboxed process circumvent sandbox restrictions. The vulnerability is addressed in Safari 16, iOS 15.7 and iPadOS 15.7, iOS 16, and macOS Ventura 13. The available documents confirm a sandbox bypass vector but do not p...

CVE-2022-42818

Technical details for CVE-2022-42818 are not present in the connected documents. Public details in the Initial document are limited to the patch (macOS Ventura 13) and status; monitor for updates.