CVE-2022-42849

CVE-2022-42849 is an Apple platform privilege-elevation issue where privileged API calls could allow a user to gain higher privileges. The record indicates an access issue in Apple’s software stack that is addressed by applying restrictions and updating to specific releases: iOS 16.2, iPadOS 16.2...

CVE-2022-32943

The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Shake-to-undo may allow a deleted photo to be re-surfaced without authentication...

CVE-2022-46699

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-42859

Multiple issues were addressed by removing the vulnerable code. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, watchOS 9.2. An app may be able to bypass Privacy preferences...

PT-2022-27956 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.2 iPadOS versions prior to 16.2 iOS versions prior to 15.7.2 iPadOS versions prior to 15.7.2 tvOS versions prior to 16.2 watchOS versions prior to 9.2 Description: An out-of-bounds write issue was addressed with...

CVE-2022-42837

An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, watchOS 9.2. A remote user may be able to cause unexpected app termination or arbitrary code executi...

CVE-2022-42867

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-42842

The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. A remote user may be able to cause kernel code execution...

CVE-2022-46692

CVE-2022-46692 is a logic issue in WebKitGTK/WebKit causing a bypass of the Same Origin Policy when processing malicious web content. The Apple ecosystem fixes (Safari 16.2, iOS 16.2/iPadOS 16.2, macOS Ventura 13.1, watchOS 9.2, etc.) are documented in the initial CVE description. Connected advis...

CVE-2022-42846

CVE-2022-42846 concerns a memory handling issue in the Apple graphics driver exposed when parsing a maliciously crafted video file. Affected products include iOS and iPadOS versions prior to the fixed releases (Apple indicates fixes in iOS 16.2 and iPadOS 16.2, and iOS 15.7.2 and iPadOS 15.7.2). ...

CVE-2022-46698

CVE-2022-46698 is a logic issue in WebKitGTK where processing malicious web content may disclose sensitive user information. Multiple connected advisories confirm this issue in WebKitGTK/WebKit2GTK components and list it among fixed CVEs after updates to WebKitGTK packages. Affected products incl...

CVE-2022-42843

CVE-2022-42843 is an information-disclosure vulnerability fixed in Apple OS updates. According to the provided documents, applying updates to iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, and watchOS 9.2 mitigates the issue, which allowed a user to view sensitive user information. The ...

CVE-2022-42859

CVE-2022-42859 concerns Apple platforms. According to Apple and related security notes, multiple issues were addressed by removing the vulnerable code, and the fix is shipped in iOS 16.2, iPadOS 16.2, macOS Ventura 13.1, and watchOS 9.2. The underlying effect is that an app may be able to bypass ...

CVE-2022-42865

This CVE (CVE-2022-42865) concerns Apple platforms and is addressed by enabling hardened runtime. It is fixed in iOS 16.2, iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, and watchOS 9.2. The issue allows an app to bypass Privacy preferences. The connected documents corroborate: the vulnerability is ...

CVE-2022-46694

CVE-2022-46694 affects Apple devices via an out-of-bounds write triggered by parsing a malicious video file. Public documents consistently describe the root cause as improper input validation in the video parsing path, leading to potential kernel code execution. Affected software/hardware are App...

CVE-2022-46700

CVE-2022-46700 corresponds to a memory corruption issue in WebKitGTK/WebKit2GTK. The vulnerability arises from processing malicious web content, potentially allowing arbitrary code execution. Public advisories (Debian DSA-5308/5309, Fedora package update, AlmaLinux advisories) indicate that WebKi...

CVE-2022-42845

CVE-2022-42845 is an Apple-related vulnerability addressed by memory-management improvements. The CVE affects multiple Apple OSes and devices (tvOS, macOS Monterey Big Sur Ventura, iOS/iPadOS, watchOS) and is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS...

CVE-2022-42852

Mode C: CVE-2022-42852 affects WebKitGTK (webkitgtk2/gtk3 WebKit) components used in Linux GTK-based deployments. The issue allows processing of malicious web content to disclose process memory. Public advisories confirm fixes in WebKitGTK-related packages (e.g., Debian webkit2gtk updates, Fedora...

CVE-2022-42850

CVE-2022-42850 is an Apple iOS/iPadOS vulnerability where an app could execute arbitrary code with kernel privileges due to improved memory handling. The issue affects iOS and iPadOS and is addressed in iOS 16.2 and iPadOS 16.2. The core detail provided states the vulnerability arises from memory...

CVE-2022-46695

Technical details about CVE-2022-46695 are not publicly provided in the connected documents. Available sources only reiterate that a UI spoofing issue was fixed in specific Apple OS versions. Monitor for updates.