CVE-2022-22634

CVE-2022-22634 affects Apple’s AVEVideoEncoder component on tvOS, iOS, and iPadOS. The issue is a buffer overflow that was addressed by improved bounds checking, enabling arbitrary code execution with kernel privileges on the affected devices. Affected firmwares include tvOS 15.4, iOS 15.4, and i...

CVE-2022-22621

This issue was addressed with improved checks. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. A person with physical access to an iOS device may be able to see sensitive information via keyboard suggestions...

CVE-2022-22621

CVE-2022-22621 is an Apple issue affecting iOS/iPadOS/tvOS/watchOS/macOS where, with physical access to an iOS device, a user may see sensitive information via keyboard suggestions. The vulnerability stems from inadequate checks in the affected component (keyboard suggestions); it is mitigated by...

CVE-2022-22622

CVE-2022-22622 concerns an information-disclosure vulnerability in Apple iOS/iPadOS where, on devices with physical access, sensitive information could be exposed via keyboard suggestions. The issue was fixed in iOS 15.4 and iPadOS 15.4 through improved checks/state management. Affected component...

CVE-2022-22622

This issue was addressed with improved checks. This issue is fixed in iOS 15.4 and iPadOS 15.4. A person with physical access to an iOS device may be able to see sensitive information via keyboard suggestions...

CVE-2022-22618

This issue was addressed with improved checks. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4. A user may be able to bypass the Emergency SOS passcode prompt...

CVE-2022-22618

CVE-2022-22618 concerns iOS/iPadOS/watchOS where the Emergency SOS passcode prompt could be bypassed. The Apple advisories attribute the issue to insufficient or inadequate checks, with the fix implemented in watchOS 8.5, iOS 15.4, and iPadOS 15.4. The vulnerability is discussed with references t...

CVE-2022-22620

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 v. 16612.4.9.1.8 and 15612.4.9.1.8. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a...

CVE-2022-22620

CVE-2022-22620 is a WebKit use-after-free vulnerability affecting Apple WebKit/ Safari stack (e.g., WebKit in macOS/iOS/iPadOS, and WebKitGTK/WebKitGTK-based ports). Exploitation involves processing malicious web content, potentially enabling arbitrary code execution. Apple’s fixes are in Safari ...

CVE-2022-22612

CVE-2022-22612 involves a memory consumption issue that can lead to heap corruption when processing a maliciously crafted image. Affected products include Apple media frameworks across macOS Monterey 12.3, tvOS 15.4, iOS 15.4, iPadOS 15.4, watchOS 8.5, and iTunes 12.12.3 for Windows. The root cau...

CVE-2022-22612

A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to heap corruption...

CVE-2022-22614

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, macOS Monterey 12.3. An application may be able to execute arbitrary code with kernel privileges...

CVE-2022-22609

The CVE-2022-22609 issue affects Apple platforms and was caused by insufficient permissions checks that could allow a malicious application to read other apps’ settings. It is fixed in tvOS 15.4, iOS 15.4, iPadOS 15.4, macOS Monterey 12.3, and watchOS 8.5. Affected products are Apple’s mobile and...

CVE-2022-22609

The issue was addressed with additional permissions checks. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. A malicious application may be able to read other applications' settings...

CVE-2022-22615

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, macOS Monterey 12.3. An application may be able to execute arbitrary code with kernel privileges...

CVE-2022-22615

CVE-2022-22615 describes a use-after-free vulnerability that Apple addressed through memory-management fixes. The issue could allow an application to execute arbitrary code with kernel privileges. Affected platforms and fixed versions are: tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5...

CVE-2022-22611

CVE-2022-22611 is an Apple vulnerability in ImageIO where processing a maliciously crafted image triggers an out-of-bounds read, addressed by input validation improvements. Affected products include tvOS, iOS, iPadOS, watchOS, macOS Monterey, and iTunes for Windows; fixed in tvOS 15.4, iOS 15.4, ...

CVE-2022-22611

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2022-22599

CVE-2022-22599 describes a permissions issue that could let a person with physical access to a device use Siri to obtain some location information from the lock screen. The issue is mitigated by updates: watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, and macOS Monterey 12.3 include ...

CVE-2022-22600

The issue was addressed with improved permissions logic. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. A malicious application may be able to bypass certain Privacy preferences...