CVE-2022-32889

CVE-2022-32889 is an Apple vulnerability affecting iOS and watchOS where a memory handling issue could allow an app to execute arbitrary code with kernel privileges. Apple and Red Hat sources indicate the root cause is memory handling, and fixes are in iOS 16 and watchOS 9. The impact is high (ke...

CVE-2022-32867

CVE-2022-32867 affects Apple iOS (Crash Reporter data handling) and macOS Ventura 13, where a user with physical access could read past diagnostic logs. Apple fixes: iOS 16 and macOS Ventura 13, per CVE context; CVSS shown as LOW (PHYSICAL access, no user interaction). No exploitation details are...

CVE-2022-32827

CVE-2022-32827 is a memory corruption vulnerability in AppleAVD affecting macOS Ventura 13 and iOS prior to 16. The issue could allow an app to cause a denial-of-service. Apple fixed it in iOS 16 and macOS Ventura 13 by improved state management. No exploit details are provided in the connected d...

CVE-2022-32827

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to cause a denial-of-service...

CVE-2022-32865

CVE-2022-32865 affects Apple platforms and is described in official Apple security content as a kernel‑level issue mitigated by memory handling improvements. According to the vulnerability entry, the flaw is fixed in iOS 16 and macOS Ventura 13, with the potential to allow an app to execute arbit...

CVE-2022-32918

This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to bypass Privacy preferences...

CVE-2022-32887

The issue was addressed with improved memory handling. This issue is fixed in iOS 16. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-42790

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, macOS Monterey 12.6. A user may be able to view restricted content from the lock screen...

CVE-2022-32899

CVE-2022-32899 affects Apple Neural Engine and related Apple OS components; the issue could allow an app to execute arbitrary code with kernel privileges. Apple fixed it in iOS 15.7, iPadOS 15.7, iOS 16, macOS Ventura 13, and watchOS 9. The description notes bug fix via improved memory handling. ...

CVE-2022-32898

CVE-2022-32898 is an Apple Kernel/Apple Neural Engine memory‑handling issue that could allow arbitrary code execution with kernel privileges. The connected exploit notes describe a memory corruption path in ANE’s program creation (ANE_ProgramCreate_gated) via an overflow of a planes array, contro...

CVE-2022-32881

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, watchOS 9, macOS Monterey 12.6, tvOS 16. An app may be able to modify protected parts of the file system...

CVE-2022-32909

The issue was addressed with improved handling of caches. This issue is fixed in iOS 16. An app may be able to access user-sensitive data...

CVE-2022-32914

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, watchOS 9, macOS Monterey 12.6, tvOS 16. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-32903

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-32918

This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to bypass Privacy preferences...

CVE-2022-32858

CVE-2022-32858 affects Apple platforms (iOS, macOS, watchOS) where a memory handling issue could allow an app to leak sensitive kernel state. The official description indicates the root cause is improved memory handling, and Apple fixed it in iOS 16, macOS Ventura 13, and watchOS 9. Connected sou...

CVE-2022-32870

A logic issue was addressed with improved state management. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. A user with physical access to a device may be able to use Siri to obtain some call history information...

CVE-2022-32888

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, watchOS 9, macOS Monterey 12.6, tvOS 16. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-42793

CVE-2022-42793 concerns a vulnerability where code signing validation could be bypassed due to inadequate checks. The issue affects Apple platforms and was addressed by improving code signing validation in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7, iPadOS 15.7, and macOS Monterey 12....

CVE-2022-32925

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to cause unexpected system termination or write kernel memory...