CVE-2022-32940

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-32935

A lock screen issue was addressed with improved state management. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16, macOS Ventura 13. A user may be able to view restricted content from the lock screen...

CVE-2022-32946

CVE-2022-32946 affects iOS and iPadOS where an entitlement-related issue could allow an app to record audio via connected AirPods. The vulnerability is described as a local issue with low attack complexity and requires user interaction; its impact is possible audio recording without explicit micr...

CVE-2022-42811

Apple fixed CVE-2022-42811 as a sandbox-related access issue in tvOS 16.1, iOS 16.1, iPadOS 16, macOS Ventura 13, and watchOS 9.1. The vulnerability could allow an app to access user‑sensitive data; no exploitation status is provided in the sources. Remediation is available via updating to the li...

CVE-2022-32940

CVE-2022-32940 affects Apple platforms (tvOS 16.1, iOS 16.1, iPadOS 16, macOS Ventura 13, watchOS 9.1). The issue enables an app to potentially execute arbitrary code with kernel privileges due to a bounds-checking flaw; Apple notes this is fixed in the listed OS versions. The CVE entry provides ...

CVE-2022-42817

Summary of CVE-2022-42817 (Apple ecosystem) : A logic issue affecting Safari/WebKit on Apple systems could allow leakage of sensitive data when visiting a malicious website. Root cause described as improved state management. Fixed in software updates: iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iP...

CVE-2022-32924

CVE-2022-32924 affects Apple platforms (tvOS 16.1; macOS Big Sur 11.7; macOS Ventura 13; watchOS 9.1; iOS 16.1; iPadOS 16). Root cause: improved memory handling exposed a vulnerability that could allow an app to execute arbitrary code with kernel privileges. Impact is kernel-level code execution....

CVE-2022-42799

The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Visiting a malicious website may lead to user interface spoofing...

PT-2022-21601 · Apple · Airpods +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.1 iPadOS versions prior to 16.1 Description: The issue allowed apps with Bluetooth access to record audio using connected AirPods, potentially capturing conversations with Siri and background sound. This was possible...

About the security content of iOS 15.7.1 and iPadOS 15.7.1

About the security content of iOS 15.7.1 and iPadOS 15.7.1 This document describes the security content of iOS 15.7.1 and iPadOS 15.7.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

Apple iOS and iPadOS Arbitrary Code Execution Vulnerability

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices. The vulnerability can be exploited to execute arbitrary code on the device with kernel privileges...

Apple Releases Security Updates for Multiple Products 

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected device. CISA encourages users and administrators to review the Apple security updates page for the following products and app...

Apple Releases Patch for New Actively Exploited iOS and iPadOS Zero-Day Vulnerability

Tech giant Apple on Monday rolled out updates to remediate a zero-day flaw in iOS and iPadOS that it said has been actively exploited in the wild. The weakness, given the identifier CVE-2022-42827, has been described as an out-of-bounds write issue in the Kernel, which could be abused by a rogue...

Apple iOS and iPadOS Out-of-Bounds Write Vulnerability

Apple iOS and iPadOS kernel contain an out-of-bounds write vulnerability which can allow an application to perform code execution with kernel privileges...

PT-2022-21599 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 15.7.1 and prior to 16.1 Apple iPadOS versions prior to 15.7.1 and prior to 16 Apple tvOS versions prior to 16.1 Apple watchOS versions prior to 9.1 Apple macOS versions prior to 11.7.1, prior to 12.6.1, and prior ...

About the security content of iOS 16.1 and iPadOS 16

About the security content of iOS 16.1 and iPadOS 16 This document describes the security content of iOS 16.1 and iPadOS 16. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

Apple iOS和iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in Apple iOS and iPadOS. An attacker could use this vulnerability to execute...

PT-2022-6262 · Apple +7 · Ios +10

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 16.1 macOS versions prior to Ventura 13 iOS versions prior to 16.1 iPadOS versions prior to 16 Description: A use after free issue was addressed with improved memory management. Processing maliciously crafted web...

About the security content of iOS 16.1 and iPadOS 16

About the security content of iOS 16.1 and iPadOS 16 This document describes the security content of iOS 16.1 and iPadOS 16. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

PT-2022-26612 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.1 iPadOS versions prior to 16 macOS Ventura versions prior to 13 Description: A race condition was addressed with improved locking, which may allow an app with root privileges to execute arbitrary code with kernel...