CVE-2022-32817

An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to disclose kernel memory...

CVE-2022-32785

A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing an image may lead to a denial-of-service...

PT-2022-21542 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.7 macOS Ventura versions prior to 13 iOS versions prior to 16 watchOS versions prior to 9 macOS Monterey versions prior to 12.6 Description: A logic issue was addressed with improved state management, which could...

Zero-day vulnerabilities fixed in Apple macOS, iOS and iPadOS

Apple, in an interim update, has fixed two zero-day 0day vulnerabilities fixed in macOS, iOS and iPadOS. A malicious person can exploit the vulnerabilities to execute arbitrary code. The most serious vulnerability, marked CVE-2022-32894, allows execution of code at the kernel level. Abuse of this...

PT-2022-21527 · Apple · Security Update +6

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 macOS Big Sur versions prior to 11.6.8 Security Update versions prior to 2022-005 Catalina iOS versions prior to 15.6 iPadOS versions prior to 15.6 tvOS versions prior to 15.6 watchOS versions prior to 8.7...

PT-2022-21487 · Apple · Macos Monterey +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 macOS Big Sur versions prior to 11.6.8 Security Update versions prior to 2022-005 Catalina Description: A memory corruption issue was addressed through improved locking, potentially allowing an app to execute...

PT-2022-21472 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 watchOS versions prior to 8.7 tvOS versions prior to 15.6 iOS versions prior to 15.6 iPadOS versions prior to 15.6 Description: Multiple out-of-bounds write issues were addressed with improved bounds checking. An...

PT-2022-21486 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 watchOS versions prior to 8.7 iOS versions prior to 15.6 iPadOS versions prior to 15.6 Description: The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel...

PT-2022-21512 · Apple · Macos Monterey +5

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 macOS Big Sur versions prior to 11.6.8 macOS Catalina versions prior to Security Update 2022-005 iOS versions prior to 15.6 iPadOS versions prior to 15.6 Description: A logic issue was addressed with improved stat...

PT-2022-21489 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 macOS Big Sur versions prior to 11.6.8 macOS Catalina versions prior to Security Update 2022-005 iOS versions prior to 15.6 iPadOS versions prior to 15.6 tvOS versions prior to 15.6 watchOS versions prior to 8.7...

PT-2022-21511 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 tvOS versions prior to 15.6 iOS versions prior to 15.6 iPadOS versions prior to 15.6 Description: The issue allows an app to potentially cause unexpected system termination or write kernel memory due to inadequate...

PT-2022-18067 · Apple · Macos Monterey +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.4 watchOS versions prior to 8.6 tvOS versions prior to 15.5 macOS Big Sur versions prior to 11.6.6 Description: A memory corruption issue was addressed with improved state management, which may allow an application ...

PT-2022-18076 · Apple · Macos Monterey +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.4 macOS Big Sur versions prior to 11.6.6 Description: This issue was addressed with improved checks. An attacker may be able to cause unexpected application termination or arbitrary code execution. Recommendations:...

PT-2022-18017 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.4 Description: A validation issue existed in the handling of symlinks, which has been addressed with improved validation of symlinks. This issue may allow an app to gain elevated privileges. Recommendations: For...

PT-2022-2641 · Apple +8 · Macos Monterey +17

Name of the Vulnerable Software and Affected Versions: Apple Safari versions prior to 15.5 Apple tvOS versions prior to 15.5 Apple watchOS versions prior to 8.6 Apple iOS versions prior to 15.5 Apple iPadOS versions prior to 15.5 Apple macOS Monterey versions prior to 12.4 Apple iTunes for Window...

Vulnerabilities fixed in Apple products

Two different vulnerabilities have been fixed by Apple. The vulnerability with CVE attribute CVE-2022-22675 allows a malicious person able to execute arbitrary code with kernel privileges. This vulnerability has been fixed in macOS, iOS and iPadOS. The second vulnerability, CVE-2022-22674, allows...

CVE-2022-22627

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process...

CVE-2022-22626

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process...

CVE-2022-22627

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process...

CVE-2021-30835

This issue was addressed with improved checks. This issue is fixed in Security Update 2021-005 Catalina, iTunes 12.12 for Windows, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted image may lead to arbitrary code execution...