Authorization

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to gain root privileges...

Memory corruption

A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-22610

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to code execution...

CVE-2022-22629

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-22629

CVE-2022-22629 is a buffer overflow in WebKit-derived components (WebKitGTK/WebKit) that could allow arbitrary code execution when processing malicious web content. Public sources in the Apple Safari 15.4 security content and multiple Linux advisories confirm the issue and provide fixed versions....

CVE-2022-22629

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-32841

The CVE-2022-32841 issue is an Apple image-processing memory disclosure vulnerability. According to the sources, it is addressed by Apple with fixes in macOS Monterey 12.5, watchOS 8.7, iOS 15.6 and iPadOS 15.6, and is caused by improved memory handling while processing a maliciously crafted imag...

CVE-2022-32845

CVE-2022-32845 is a signature-check bypass vulnerability in Apple’s Neural Engine model loading (model.hwx) that can enable sandbox escapes via manipulated HWX files. The issue arises in how ANE threads bind and process inputs, allowing an attacker to bypass Apple’s signature checks during aned m...

CVE-2022-32832

CVE-2022-32832: Apple security issue tied to memory handling that could allow an app with root privileges to execute arbitrary code with kernel privileges. The vulnerability is addressed via updates across Apple operating systems, including iOS 15.6/iPadOS 15.6, macOS Big Sur 11.6.8, macOS Monter...

CVE-2022-32845

This issue was addressed with improved checks. This issue is fixed in watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to break out of its sandbox...

CVE-2022-32832

The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app with root privileges may be able to execute arbitrary code with kernel privileges...

CVE-2022-32825

The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5. An app may be able to disclose kernel memory...

CVE-2022-32825

CVE-2022-32825 affects Apple platforms (iOS 15.6, iPadOS 15.6, macOS Big Sur 11.6.8, macOS Monterey 12.5, watchOS 8.7, tvOS 15.6). Root cause: memory handling issue that may allow an app to disclose kernel memory. Fixed in the listed OS updates; remediation is to upgrade to versions containing th...

CVE-2022-32821

CVE-2022-32821 is a memory corruption vulnerability addressed by Apple in multiple OS updates. The issue involved memory corruption that was mitigated by improved validation and is fixed in: watchOS 8.7, tvOS 15.6, iOS 15.6 / iPadOS 15.6, and macOS Monterey 12.5. The impact stated in the CVE note...

CVE-2022-32826

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to gain root privileges...

CVE-2022-32826

CVE-2022-32826 is a local authorization issue in Apple OS components. The description: an app may gain root privileges due to improved state management. Affected products/versions include iOS 15.6, iPadOS 15.6, macOS Big Sur 11.6.8, macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, and Security Update...

CVE-2022-32819

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to gain root privileges...

CVE-2022-32823

CVE-2022-32823 describes a memory initialization issue that could allow an app to leak sensitive user information. It is fixed in Apple OS updates: iOS/iPadOS 15.6, macOS Big Sur 11.6.8, macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, and Security Update 2022-005 Catalina. The vulnerability is local...

CVE-2022-32819

The CVE-2022-32819 entry describes a logic issue that could allow an app to gain root privileges. It is addressed in Apple software updates across multiple platforms: iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, and Security Update 2022-005 Catalina...

CVE-2022-32823

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to leak sensitive user information...