7948 matches found
CVE-2022-42813
A certificate validation issue existed in the handling of WKWebView. This issue was addressed with improved validation. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. Processing a maliciously crafted certificate may lead to arbitrary code execution...
CVE-2022-42799
CVE-2022-42799 describes a UI spoofing vulnerability in WebKitGTK/WebKit-based browsers when visiting a malicious site. The Apple OS updates fixed this (tvOS/macOS/iOS/watchOS Safari/WebKit) to mitigate UI spoofing. Connected advisories show WebKitGTK/WebKit fixes: Debian/Ubuntu advisories (CVE-2...
CVE-2022-32928
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. A user in a privileged network position may be able to intercept mail credentials...
CVE-2022-32941
The issue was addressed with improved bounds checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. A buffer overflow may result in arbitrary code execution...
CVE-2022-32890
CVE-2022-32890 affects macOS (notably macOS Ventura 13). The issue is described as a logic flaw that could allow a sandboxed process to circumvent sandbox restrictions. Apple documents update fixed in Ventura 13. Remediation: update to macOS Ventura 13 or later. Exploitation details are not provi...
CVE-2022-32947
CVE-2022-32947 affects Apple platforms (iOS/iPadOS/macOS) and is tied to memory handling issues in GPU/Kernel components that could allow an app to execute arbitrary code with kernel privileges. Public documentation confirms the vulnerability could enable kernel-level code execution and that patc...
CVE-2022-42831
CVE-2022-42831 describes a race condition in Apple devices that could allow an app with root privileges to execute arbitrary code with kernel privileges. Apple fixes are noted in iOS 16.1 and iPadOS 16, and macOS Ventura 13. The initial description states kernel-level impact but does not provide ...
CVE-2022-42815
CVE-2022-42815 concerns macOS; multiple sources indicate a data-access issue resolved by Apple in macOS Ventura 13. The Apple/NTD entries show CVE-2022-42815 affecting Mail with an impact on accessing user data, and NVD confirms a fix in Ventura 13. There is no public exploit detail in the provid...
CVE-2022-32865
The issue was addressed with improved memory handling. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges...
CVE-2022-32918
CVE-2022-32918 affects Apple platforms (iOS 16 and macOS Ventura 13). The issue allows an app to bypass Privacy preferences due to improper data protection handling. Apple notes the vulnerability was fixed in iOS 16 and macOS Ventura 13, restoring proper privacy controls. The CVE entry reflects a...
CVE-2022-42809
CVE-2022-42809 affects macOS Ventura 13 and related macOS builds. The issue arises from how a maliciously crafted gcx file is processed, due to a memory handling vulnerability that can lead to unexpected application termination or arbitrary code execution. The Red Hat and Apple security pages con...
CVE-2022-42791
CVE-2022-42791 is a macOS-specific race condition vulnerability that was addressed by improving state handling. The issue could allow an app to execute arbitrary code with kernel privileges and is fixed in macOS Ventura 13. Affected component is the kernel-related path implicated by the race cond...
CVE-2022-32899
CVE-2022-32899 affects Apple Neural Engine and related Apple OS components; the issue could allow an app to execute arbitrary code with kernel privileges. Apple fixed it in iOS 15.7, iPadOS 15.7, iOS 16, macOS Ventura 13, and watchOS 9. The description notes bug fix via improved memory handling. ...
CVE-2022-32827
CVE-2022-32827 is a memory corruption vulnerability in AppleAVD affecting macOS Ventura 13 and iOS prior to 16. The issue could allow an app to cause a denial-of-service. Apple fixed it in iOS 16 and macOS Ventura 13 by improved state management. No exploit details are provided in the connected d...
CVE-2022-42811
An access issue was addressed with additional sandbox restrictions. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to access user-sensitive data...
CVE-2022-42832
A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges...
CVE-2022-42788
CVE-2022-42788 refers to a permissions issue in macOS Find My that could allow a malicious application to read sensitive location information. The root cause is insufficient permission validation, and Apple addressed it by improving permission checks. The vulnerability is fixed in macOS Ventura 1...
CVE-2022-32915
A type confusion issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges...