CVE-2022-46701

The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2. Connecting to a malicious NFS server may lead to arbitrary code execution with kernel privileges...

CVE-2022-42851

CVE-2022-42851 involves an information disclosure vulnerability in Apple's ImageIO/TIFF handling that is fixed in iOS 16.2, iPadOS 16.2, and tvOS 16.2. The root cause is described as improved memory handling during parsing of maliciously crafted TIFF files, which may lead to disclosure of user in...

CVE-2022-46690

CVE-2022-46690 is an Apple family issue described as an out-of-bounds write that was addressed with improved input validation. The Apple security content lists multiple components affected across platforms (iOS, iPadOS, macOS, tvOS, watchOS), with the kernel and several subsystems (e.g., IOMobile...

CVE-2022-42855

CVE-2022-42855 concerns a logic/entitlements parsing issue in Apple’s DER-entitlements handling. The root cause, as discussed by Project Zero, is in libCoreEntitlements’ DER traversal: three paths handled entitlement sequences differently, causing hidden/unused entitlements to surface under CECon...

CVE-2022-46694

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, iOS 15.7.2 and iPadOS 15.7.2, tvOS 16.2, watchOS 9.2. Parsing a maliciously crafted video file may lead to kernel code execution...

CVE-2022-46690

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges...

PT-2022-26622 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.2 iPadOS versions prior to 16.2 Description: The issue was addressed with improved memory handling. An app may be able to break out of its sandbox. Recommendations: For iOS versions prior to 16.2, update to iOS 16.2 o...

CVE-2022-46695

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Visiting a website that frames malicious content may lead to UI...

CVE-2022-46702

CVE-2022-46702 is an Apple iOS/iPadOS kernel memory disclosure issue addressed in iOS 16.2 and iPadOS 16.2. The publicly available sources attribute the vulnerability to memory handling weaknesses in kernel-related components, with Apple confirming that an app may disclose kernel memory. The Appl...

CVE-2022-42851

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16.2, tvOS 16.2. Parsing a maliciously crafted TIFF file may lead to disclosure of user information...

CVE-2022-46699

CVE-2022-46699 is a WebKitGTK/WebKitGTK2/WebKitGTK4 memory-corruption vulnerability that can allow arbitrary code execution when processing malicious web content. Connected advisories confirm the issue and its fixes across multiple distros: Debian/Ubuntu Debian-LTS (webKit2GTK/WebKit2GTK), Fedora...

CVE-2022-42805

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-32948

CVE-2022-32948 describes an out-of-bounds read that could allow an app to execute arbitrary code with kernel privileges. The vulnerability is associated with Apple’s Neural Engine and is fixed in Apple software updates: iOS 15.6, iPadOS 15.6, and macOS Monterey 12.5. The initial entry indicates t...

CVE-2022-42805

CVE-2022-42805 is an Apple-related vulnerability where an integer overflow occurred due to insufficient input validation. The issue could allow an app to execute arbitrary code with kernel privileges. Public references indicate fixes in iOS 15.6, iPadOS 15.6, and macOS Monterey 12.5. The Red Hat ...

CVE-2022-42856

A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.1.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this iss...

CVE-2022-46698

A logic issue was addressed with improved checks. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may disclose sensitive user information...

CVE-2022-42842

CVE-2022-42842 affects Apple platforms and is tied to a kernel memory handling issue that could allow remote code execution. The CVE is listed among Apple TV vulnerabilities in the Apple TV 16.2 and related macOS/iOS/watchOS updates as fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1...

CVE-2022-42837

Technical details for CVE-2022-42837 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-42846

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16.2, iOS 15.7.2 and iPadOS 15.7.2. Parsing a maliciously crafted video file may lead to unexpected system termination...

CVE-2022-42843

CVE-2022-42843 is an information-disclosure vulnerability fixed in Apple OS updates. According to the provided documents, applying updates to iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, and watchOS 9.2 mitigates the issue, which allowed a user to view sensitive user information. The ...