CVE-2022-32866

The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, watchOS 9, macOS Monterey 12.6, tvOS 16. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-32918

This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to bypass Privacy preferences...

CVE-2022-32946

This issue was addressed with improved entitlements. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to record audio using a pair of connected AirPods...

CVE-2022-32887

The issue was addressed with improved memory handling. This issue is fixed in iOS 16. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-42790

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, macOS Monterey 12.6. A user may be able to view restricted content from the lock screen...

CVE-2022-32865

CVE-2022-32865 affects Apple platforms and is described in official Apple security content as a kernel‑level issue mitigated by memory handling improvements. According to the vulnerability entry, the flaw is fixed in iOS 16 and macOS Ventura 13, with the potential to allow an app to execute arbit...

PT-2022-21510 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16 watchOS versions prior to 9 Description: The issue allows an app to potentially read a persistent device identifier. This was addressed with improved entitlements. Recommendations: For iOS versions prior to 16, update...

CVE-2022-42813

A certificate validation issue existed in the handling of WKWebView. This issue was addressed with improved validation. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. Processing a maliciously crafted certificate may lead to arbitrary code execution...

CVE-2022-32887

The issue was addressed with improved memory handling. This issue is fixed in iOS 16. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-42800

CVE-2022-42800 affects Apple platforms including iOS, iPadOS, macOS, watchOS and related OS updates. The issue is mitigated by Apple through updated builds: iOS/iPadOS 15.7.1, iOS 16.1, macOS Ventura 13 (and Monterey 12.6.1, Big Sur 11.7.1), watchOS 9.1, with the fix described as improved checks ...

CVE-2022-32940

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-42831

A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges...

CVE-2022-32881

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, watchOS 9, macOS Monterey 12.6, tvOS 16. An app may be able to modify protected parts of the file system...

CVE-2022-32909

The issue was addressed with improved handling of caches. This issue is fixed in iOS 16. An app may be able to access user-sensitive data...

CVE-2022-32903

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-32918

This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to bypass Privacy preferences...

CVE-2022-32859

CVE-2022-32859 describes a logic issue in Apple iOS where improved state management fixes a vulnerability that allowed deleted contacts to still appear in Spotlight search results. Affected software: iOS prior to 16; fix is in iOS 16 and later. Root cause: state management logic that did not corr...

CVE-2022-32858

CVE-2022-32858 affects Apple platforms (iOS, macOS, watchOS) where a memory handling issue could allow an app to leak sensitive kernel state. The official description indicates the root cause is improved memory handling, and Apple fixed it in iOS 16, macOS Ventura 13, and watchOS 9. Connected sou...

CVE-2022-32898

CVE-2022-32898 is an Apple Kernel/Apple Neural Engine memory‑handling issue that could allow arbitrary code execution with kernel privileges. The connected exploit notes describe a memory corruption path in ANE’s program creation (ANE_ProgramCreate_gated) via an overflow of a planes array, contro...

CVE-2022-32935

CVE-2022-32935 is an Apple lock-screen vulnerability addressed by updates across multiple Apple platforms. The issue allowed a user to view restricted content from the lock screen due to a state-management flaw. It affects iOS/iPadOS versions prior to the patches: iOS 15.7.1, iPadOS 15.7.1, iOS 1...