CVE-2022-26716

A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-26710

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, tvOS 15.5, watchOS 8.6. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-32923

A correctness issue in the JIT was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose internal states of the app...

CVE-2022-42799

CVE-2022-42799 describes a UI spoofing vulnerability in WebKitGTK/WebKit-based browsers when visiting a malicious site. The Apple OS updates fixed this (tvOS/macOS/iOS/watchOS Safari/WebKit) to mitigate UI spoofing. Connected advisories show WebKitGTK/WebKit fixes: Debian/Ubuntu advisories (CVE-2...

CVE-2022-32944

CVE-2022-32944 is a memory corruption vulnerability that can allow an app to execute arbitrary code with kernel privileges. The issue is addressed by fixes across multiple Apple platforms: tvOS 16.1, iOS 15.7.1/iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1/iPadOS 16, macOS Monterey 12.6....

CVE-2022-42823

A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-42811

An access issue was addressed with additional sandbox restrictions. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to access user-sensitive data...

CVE-2022-32866

The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, watchOS 9, macOS Monterey 12.6, tvOS 16. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-26719

A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-32913

CVE-2022-32913 affects Apple platforms where the issue is fixed by adding restrictions on observability of app states to determine which app is using the camera. Publicly documented fixes include macOS Big Sur 11.7, macOS Monterey 12.6, macOS Ventura 13, iOS 16, watchOS 9, and tvOS 16. The vulner...

CVE-2022-26710

CVE-2022-26710 is a use-after-free vulnerability in WebKitGTK/WebKit2GTK that could lead to arbitrary code execution when processing malicious web content. Connected advisories identify WebKitGTK/WebKit2GTK as affected, with fixed updates in downstream distributions (e.g., AL2/AL8 advisories and ...

CVE-2022-26709

CVE-2022-26709 is a use-after-free in WebKitGTK that can lead to arbitrary code execution when processing malicious web content. The initial CVE entry notes the fix across Apple platforms (tvOS 15.5, iOS 15.5/iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5). Connected advisories (Debia...

CVE-2022-32926

CVE-2022-32926 affects Apple platforms and was remediated by improved bounds checks. The issue could allow an app with root privileges to execute arbitrary code with kernel privileges. Notable affected systems and fixed releases include: iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1, iPadOS 16, tvOS 16....

CVE-2022-42823

CVE-2022-42823 describes a type confusion vulnerability in WebKit (affecting WebKitGTK/WebKit2GTK and related WebKit variants) that could allow arbitrary code execution when processing maliciously crafted web content. The issue is addressed by memory-management improvements and fixes are listed f...

CVE-2022-32914

Technical details about CVE-2022-32914 are not provided in the connected documents. Monitor for updates from vendor advisories and security feeds for confirmed impact, affected products, and remedies.

CVE-2022-42798

The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. Parsing a maliciously crafted audio file may lead to disclosure of user...

CVE-2022-42803

A race condition was addressed with improved locking. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-32907

This issue was addressed with improved checks. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-42813

A certificate validation issue existed in the handling of WKWebView. This issue was addressed with improved validation. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. Processing a maliciously crafted certificate may lead to arbitrary code execution...

CVE-2022-42810

CVE-2022-42810 : The issue is a memory handling defect exposed by processing a maliciously crafted USD file, potentially disclosing memory contents. Affected products/versions include Apple iOS and iPadOS up to 15.7.1, tvOS up to 16.1, iOS 16.0/16.1 and iPadOS 16, and macOS Ventura 13. Apple has ...