CVE-2022-32923

CVE-2022-32923 is a correctness issue in the JIT that may disclose internal app states when processing malicious web content. Affected products include tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. The vulnerability is fixed in these ...

CVE-2022-42810

CVE-2022-42810 : The issue is a memory handling defect exposed by processing a maliciously crafted USD file, potentially disclosing memory contents. Affected products/versions include Apple iOS and iPadOS up to 15.7.1, tvOS up to 16.1, iOS 16.0/16.1 and iPadOS 16, and macOS Ventura 13. Apple has ...

CVE-2022-26710

CVE-2022-26710 is a use-after-free vulnerability in WebKitGTK/WebKit2GTK that could lead to arbitrary code execution when processing malicious web content. Connected advisories identify WebKitGTK/WebKit2GTK as affected, with fixed updates in downstream distributions (e.g., AL2/AL8 advisories and ...

CVE-2022-42796

CVE-2022-42796 concerns Apple platforms where the issue could allow an app to gain elevated privileges. It was mitigated by removing the vulnerable code and is fixed in iOS 15.7, iPadOS 15.7, and macOS Ventura 13.0. The description confirms no further exploitation details are provided in the give...

CVE-2022-32941

This CVE (CVE-2022-32941) concerns a buffer overflow that could lead to arbitrary code execution. The affected products are Apple systems including iOS/iPadOS and macOS releases, with the issue fixed in: iOS 15.7.1 and iPadOS 15.7.1 , macOS Ventura 13 , iOS 16.1 and iPadOS 16 , macOS Monterey 12....

CVE-2022-32938

CVE-2022-32938 affects Apple Shortcuts handling of directory paths. A parsing issue allowed a shortcut to check for the existence of an arbitrary path on the file system. Affected products/versions: iOS 16.1 and iPadOS 16; macOS Ventura 13. The issue is mitigated by the vendor’s fix through impro...

CVE-2022-26709

CVE-2022-26709 is a use-after-free in WebKitGTK that can lead to arbitrary code execution when processing malicious web content. The initial CVE entry notes the fix across Apple platforms (tvOS 15.5, iOS 15.5/iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5). Connected advisories (Debia...

CVE-2022-42820

CVE-2022-42820 is a memory corruption issue affecting Apple IOHIDFamily components, addressed by Apple in the macOS Ventura 13 security updates and iOS 16.1 / iPadOS 16. The issue could lead to an app termination or arbitrary code execution. The official Apple advisory references IOHIDFamily and ...

CVE-2022-32922

CVE-2022-32922 describes a use-after-free in Safari-related web content processing that could lead to arbitrary code execution. Affected products/versions include Safari 16.1, iOS 16.1, iPadOS 16, and macOS Ventura 13; the issue is addressed by memory-management fixes in these versions. The conne...

CVE-2022-22677

A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. Video self-preview in a webRTC call may be interrupted if the user answers a phone call...

CVE-2022-32888

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, watchOS 9, macOS Monterey 12.6, tvOS 16. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-32899

CVE-2022-32899 affects Apple Neural Engine and related Apple OS components; the issue could allow an app to execute arbitrary code with kernel privileges. Apple fixed it in iOS 15.7, iPadOS 15.7, iOS 16, macOS Ventura 13, and watchOS 9. The description notes bug fix via improved memory handling. ...

CVE-2022-42806

CVE-2022-42806 is a race-condition vulnerability that Apple fixed in iOS 16.1, iPadOS 16, and macOS Ventura 13. The issue could allow an app to execute arbitrary code with kernel privileges, and the NVD assessment indicates a local attack with high impact, requiring user interaction. Mitigation i...

CVE-2022-26762

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. A malicious application may be able to execute arbitrary code with system privileges...

CVE-2022-26710

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, tvOS 15.5, watchOS 8.6. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-32940

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-42831

A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app with root privileges may be able to execute arbitrary code with kernel privileges...

CVE-2022-32941

The issue was addressed with improved bounds checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. A buffer overflow may result in arbitrary code execution...

CVE-2022-32898

The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS Ventura 13, watchOS 9. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-32929

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 15.7 and iPadOS 15.7, iOS 16.1 and iPadOS 16. An app may be able to access iOS backups...