CVE-2022-32795

This issue was addressed with improved checks. This issue is fixed in iOS 16, iOS 15.7 and iPadOS 15.7. Visiting a malicious website may lead to address bar spoofing...

CVE-2022-32912

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-32908

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. A user may be able to elevate privileges...

CVE-2022-32886

CVE-2022-32886 is a WebKitGTK/WebKit2GTK vulnerability described as a buffer overflow when processing maliciously crafted web content, potentially enabling arbitrary code execution. Connected advisories confirm concrete fixes across distros: Debian security advisories (DSA-5240-1, DSA-5241-1) fix...

CVE-2022-32912

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-32886

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-32912

CVE-2022-32912 - Summary: An out-of-bounds read vulnerability in WebKit/WebKitGTK was addressed by improving bounds checking. The issue could allow memory disclosure or arbitrary code execution when processing malicious web content. Affected/affected components appear in WebKitGTK/WebKit across m...

CVE-2022-32854

This issue was addressed with improved checks. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An app may be able to bypass Privacy preferences...

CVE-2022-32872

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, iOS 15.7 and iPadOS 15.7. A person with physical access to an iOS device may be able to access photos from the lock screen...

CVE-2022-32868

CVE-2022-32868 affects Safari and related iOS/iPadOS web-extension handling. The issue is a logic bug in state management that could enable a website to track users via Safari web extensions. The NVD/NIST description confirms a fix in Safari 16, iOS 16, iOS 15.7, and iPadOS 15.7. Connected source...

CVE-2022-32883

CVE-2022-32883 describes a logic issue that allowed an app to read sensitive location information. It is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, and macOS Big Sur 11.7. The issue is mitigated by applying the listed Apple OS updates; no exploitation status is provided beyon...

CVE-2022-32911

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-32872

CVE-2022-32872 affects the Shortcuts component in iOS/iPadOS. A logic issue with restricted access allowed a person with physical access to an iOS device to view photos from the lock screen. Apple fixed this in iOS 16 and iOS 15.7 / iPadOS 15.7. The patch updates/restrictions close the gap; no ex...

PT-2022-7604 · Apple +7 · Macos Ventura +13

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 16.2 tvOS versions prior to 16.2 macOS Ventura versions prior to 13.1 iOS versions prior to 16.2 iPadOS versions prior to 16.2 watchOS versions prior to 9.2 WebKitGTK affected versions not specified WPE WebKit affecte...

Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability

Apple kernel, which is included in iOS, iPadOS, and macOS, contains an unspecified vulnerability where an application may be able to execute code with kernel privileges...

Apple Releases Security Updates for Multiple Products

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected device. CISA encourages users and administrators to review the Apple security updates page for the following products and app...

About the security content of iOS 15.7 and iPadOS 15.7

About the security content of iOS 15.7 and iPadOS 15.7 This document describes the security content of iOS 15.7 and iPadOS 15.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

PT-2022-21555 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 16 iOS versions prior to 15.7 and 16 iPadOS versions prior to 15.7 macOS versions prior to Ventura 13 Description: An access issue was addressed with improvements to the sandbox, which may allow a sandboxed process to...

PT-2022-26584 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.7 macOS Ventura versions prior to 13 iOS versions prior to 15.7 and 16 iPadOS versions prior to 15.7 macOS Monterey versions prior to 12.6 Description: An issue in code signature validation was addressed with improv...

Apple releases security update for iPhones and iPads to address vulnerability

Apple has released a security update for iOS 12.5.6 to patch a remotely exploitable WebKit vulnerability that allows attackers to execute arbitrary code on unpatched devices. The WebKit zero-day that is known as CVE-2022-32893 was fixed for iOS 15.6.1, iPadOS 15.6, and macOS Monterey 12.5.1 on...