CVE-2022-32943

The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Shake-to-undo may allow a deleted photo to be re-surfaced without authentication...

CVE-2022-42843

CVE-2022-42843 is an information-disclosure vulnerability fixed in Apple OS updates. According to the provided documents, applying updates to iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, and watchOS 9.2 mitigates the issue, which allowed a user to view sensitive user information. The ...

CVE-2022-46694

CVE-2022-46694 affects Apple devices via an out-of-bounds write triggered by parsing a malicious video file. Public documents consistently describe the root cause as improper input validation in the video parsing path, leading to potential kernel code execution. Affected software/hardware are App...

CVE-2022-42850

CVE-2022-42850 is an Apple iOS/iPadOS vulnerability where an app could execute arbitrary code with kernel privileges due to improved memory handling. The issue affects iOS and iPadOS and is addressed in iOS 16.2 and iPadOS 16.2. The core detail provided states the vulnerability arises from memory...

CVE-2022-46695

Technical details about CVE-2022-46695 are not publicly provided in the connected documents. Available sources only reiterate that a UI spoofing issue was fixed in specific Apple OS versions. Monitor for updates.

CVE-2022-32860

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, macOS Big Sur 11.6.8. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-46692

CVE-2022-46692 is a logic issue in WebKitGTK/WebKit causing a bypass of the Same Origin Policy when processing malicious web content. The Apple ecosystem fixes (Safari 16.2, iOS 16.2/iPadOS 16.2, macOS Ventura 13.1, watchOS 9.2, etc.) are documented in the initial CVE description. Connected advis...

CVE-2022-42856

CVE-2022-42856 is a type-confusion vulnerability in WebKit/WebKitGTK that could allow arbitrary code execution when processing malicious web content. The connected documents confirm impact across WebKit-based products, including Apple WebKit (Safari) and WebKitGTK, with fixes in Safari 16.2, macO...

PT-2022-27956 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.2 iPadOS versions prior to 16.2 iOS versions prior to 15.7.2 iPadOS versions prior to 15.7.2 tvOS versions prior to 16.2 watchOS versions prior to 9.2 Description: An out-of-bounds write issue was addressed with...

CVE-2022-42837

An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, watchOS 9.2. A remote user may be able to cause unexpected app termination or arbitrary code executi...

CVE-2022-42867

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-42842

The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. A remote user may be able to cause kernel code execution...

CVE-2022-46698

CVE-2022-46698 is a logic issue in WebKitGTK where processing malicious web content may disclose sensitive user information. Multiple connected advisories confirm this issue in WebKitGTK/WebKit2GTK components and list it among fixed CVEs after updates to WebKitGTK packages. Affected products incl...

CVE-2022-46699

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-42837

Technical details for CVE-2022-42837 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-42849

CVE-2022-42849 is an Apple platform privilege-elevation issue where privileged API calls could allow a user to gain higher privileges. The record indicates an access issue in Apple’s software stack that is addressed by applying restrictions and updating to specific releases: iOS 16.2, iPadOS 16.2...

CVE-2022-42843

This issue was addressed with improved data protection. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. A user may be able to view sensitive user information...

CVE-2022-42859

Multiple issues were addressed by removing the vulnerable code. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, watchOS 9.2. An app may be able to bypass Privacy preferences...

CVE-2022-42852

Mode C: CVE-2022-42852 affects WebKitGTK (webkitgtk2/gtk3 WebKit) components used in Linux GTK-based deployments. The issue allows processing of malicious web content to disclose process memory. Public advisories confirm fixes in WebKitGTK-related packages (e.g., Debian webkit2gtk updates, Fedora...

CVE-2022-42859

CVE-2022-42859 concerns Apple platforms. According to Apple and related security notes, multiple issues were addressed by removing the vulnerable code, and the fix is shipped in iOS 16.2, iPadOS 16.2, macOS Ventura 13.1, and watchOS 9.2. The underlying effect is that an app may be able to bypass ...