CVE-2022-32918

This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to bypass Privacy preferences...

CVE-2022-26730

The CVE-2022-26730 issue is a memory corruption vulnerability in the processing of ICC profiles in macOS. It states that processing a maliciously crafted image may lead to arbitrary code execution and that Apple addressed it by improving input validation, with a fix in macOS Ventura 13. The avail...

CVE-2022-42831

A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges...

CVE-2022-32895

The CVE-2022-32895 entry concerns a race condition in macOS that was addressed by improved state handling. Affected software is macOS Ventura 13, where an app may be able to modify protected parts of the file system. The issue is classified with a Local attack vector and High integrity impact, fi...

CVE-2022-32890

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. A sandboxed process may be able to circumvent sandbox restrictions...

CVE-2022-42799

The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Visiting a malicious website may lead to user interface spoofing...

CVE-2022-32935

CVE-2022-32935 is an Apple lock-screen vulnerability addressed by updates across multiple Apple platforms. The issue allowed a user to view restricted content from the lock screen due to a state-management flaw. It affects iOS/iPadOS versions prior to the patches: iOS 15.7.1, iPadOS 15.7.1, iOS 1...

CVE-2022-32898

CVE-2022-32898 is an Apple Kernel/Apple Neural Engine memory‑handling issue that could allow arbitrary code execution with kernel privileges. The connected exploit notes describe a memory corruption path in ANE’s program creation (ANE_ProgramCreate_gated) via an overflow of a planes array, contro...

CVE-2022-42818

Technical details for CVE-2022-42818 are not present in the connected documents. Public details in the Initial document are limited to the patch (macOS Ventura 13) and status; monitor for updates.

CVE-2022-40190

creationtimestamp| type| source ---|---|--- 2022-10-31 23:13:35+00:00| seen| https://t.me/cibsecurity/52325...

CVE-2022-43752

CVE-2022-43752 affects Oracle Solaris 10 1/13 when using the Common Desktop Environment (CDE). A low-privilege user can escalate to root by creating a malicious printer and double-clicking the printer icon, as described across multiple sources. The vulnerability is local and involves the CDE prin...

CVE-2022-41648

creationtimestamp| type| source ---|---|--- 2022-10-28 22:29:33+00:00| seen| https://t.me/cibsecurity/52242...

PT-2022-26634 · Apple · Macos Monterey +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.6.1 macOS Big Sur versions prior to 11.7.1 macOS Ventura versions prior to 13 Description: The issue allows an app to modify protected parts of the file system due to insufficient checks. This could lead to...

PT-2022-26590 · Apple · Macos Monterey +6

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.7.1 iPadOS versions prior to 15.7.1 macOS Ventura versions prior to 13 watchOS versions prior to 9.1 iOS versions prior to 16.1 iPadOS versions prior to 16 macOS Monterey versions prior to 12.6.1 macOS Big Sur version...

PT-2022-26612 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.1 iPadOS versions prior to 16 macOS Ventura versions prior to 13 Description: A race condition was addressed with improved locking, which may allow an app with root privileges to execute arbitrary code with kernel...

PT-2022-7232 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: The issue is related to inadequate access control in the Find My function of the macOS operating system, which may allow an attacker to disclose protected information. It was addressed with improved...

PT-2022-26615 · Apple · Macos Monterey +3

Name of the Vulnerable Software and Affected Versions: macOS Monterey versions prior to 12.6.3 macOS Big Sur versions prior to 11.7.3 macOS Ventura version 13 is not affected as it already includes the fix, but versions prior to 13 are affected. However, since the exact affected range for Ventura...

About the security content of macOS Ventura 13

About the security content of macOS Ventura 13 This document describes the security content of macOS Ventura 13. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

PT-2022-6262 · Apple +7 · Ios +10

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 16.1 macOS versions prior to Ventura 13 iOS versions prior to 16.1 iPadOS versions prior to 16 Description: A use after free issue was addressed with improved memory management. Processing maliciously crafted web...

PT-2022-21533 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.7.1 macOS versions prior to 12.6.1 macOS versions prior to 13 Description: The issue allows an app with root privileges to access private information. This was addressed with improved data protection. Recommendation...