CVE-2022-32796

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-32796

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-32789

CVE-2022-32789 is a logic-issue vulnerability in macOS Monterey that could allow an app to bypass Privacy preferences. The issue is fixed in macOS Monterey 12.5. There are no publicly documented exploit details in the provided sources. Remediation: upgrade to macOS Monterey 12.5 or later (as spec...

CVE-2022-32787

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. Processing maliciously crafted web content may lead to arbitrary code...

CVE-2022-32790

This issue was addressed with improved checks. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, macOS Big Sur 11.6.6, Security Update 2022-004 Catalina. A remote user may be able to cause a denial-of-service...

CVE-2022-32783

A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4. An app may gain unauthorized access to Bluetooth...

CVE-2022-32783

A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4. An app may gain unauthorized access to Bluetooth...

CVE-2022-32852

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of process memory...

CVE-2022-32852

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of process memory...

CVE-2022-32783

CVE-2022-32783 is a logic issue fixed in macOS Monterey 12.4. The Apple advisory notes a vulnerability where an app may gain unauthorized access to Bluetooth due to improved checks. The public documentation confirms the affected platform as macOS Monterey and the fixed version as 12.4. The NVD en...

CVE-2022-32852

CVE-2022-32852 affects macOS Monterey 12.5 and relates to an out-of-bounds read when processing a malicious AppleScript binary. The vulnerability arises from insufficient input validation, which could cause unexpected termination or disclosure of process memory. Apple has addressed this by fixing...

CVE-2022-32785

CVE-2022-32785 describes a null pointer dereference in Apple’s image processing flow. Public sources (NVD/NASL/PRION references) state this issue is fixed by macOS Monterey 12.5, macOS Big Sur 11.6.8, macOS Security Update 2022-005 Catalina, and iOS 15.6/iPadOS 15.6. The root cause is a null poin...

CVE-2022-32781

This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5, Security Update 2022-005 Catalina, macOS Big Sur 11.6.8. An app with root privileges may be able to access private information...

CVE-2022-32782

CVE-2022-32782 affects macOS Monterey. The issue is that an app with root privileges may access private information. The vulnerability is addressed by enabling hardened runtime and is fixed in macOS Monterey 12.4. The provided documents do not specify the exact root cause beyond the mitigation, n...

CVE-2022-22628

CVE-2022-22628 is a WebKitGTK/WebKit2GTK use-after-free vulnerability that can lead to arbitrary code execution when processing malicious web content. Connected advisories confirm exploitation potential in WebKitGTK/WebKit2GTK across Linux distributions and related platforms. Mitigations document...

CVE-2022-26700

CVE-2022-26700: A memory corruption issue in WebKit-derived components is addressed. According to the CVE page, processing maliciously crafted web content may lead to arbitrary code execution. Apple specifies fixes in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, and Safa...

CVE-2022-32782

This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.4. An app with root privileges may be able to access private information...

CVE-2022-32782

This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.4. An app with root privileges may be able to access private information...

CVE-2022-22628

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-22610

CVE-2022-22610 involves a memory corruption issue addressed with improved state management. The vulnerability is fixed in macOS Monterey 12.3 and corresponding Apple software updates: Safari 15.4, watchOS 8.5, iOS 15.4, iPadOS 15.4, and tvOS 15.4. Exploitation would occur by processing maliciousl...