CVE-2022-32910

CVE-2022-32910 affects Apple's Archive Utility on macOS Big Sur 11.6.8 and macOS Monterey 12.5 (also Catalina Security Update 2022-005). It is a logic issue that could let a specially crafted archive bypass Gatekeeper checks, potentially allowing an unsigned and unnotarized app to run without use...

CVE-2022-32881

CVE-2022-32881 describes a logic issue that could allow an app to modify protected parts of the file system. Apple notes the fix as “improved restrictions” and lists affected platforms and versions: macOS Big Sur 11.7, macOS Monterey 12.6, macOS Ventura 13, iOS 16, watchOS 9, tvOS 16. These entri...

CVE-2022-32881

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, watchOS 9, macOS Monterey 12.6, tvOS 16. An app may be able to modify protected parts of the file system...

CVE-2022-32870

A logic issue was addressed with improved state management. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. A user with physical access to a device may be able to use Siri to obtain some call history information...

CVE-2022-42814

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitive data...

CVE-2022-32910

A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.8, macOS Monterey 12.5, Security Update 2022-005 Catalina. An archive may be able to bypass Gatekeeper...

CVE-2022-32859

CVE-2022-32859 describes a logic issue in Apple iOS where improved state management fixes a vulnerability that allowed deleted contacts to still appear in Spotlight search results. Affected software: iOS prior to 16; fix is in iOS 16 and later. Root cause: state management logic that did not corr...

CVE-2022-32870

CVE-2022-32870 is a logic issue fixed in Apple platforms (iOS 16, macOS Ventura 13, watchOS 9) that could allow a user with physical access to a device to use Siri to obtain some call history information. The root cause is described as improved state management. Public references in the CVE entry...

CVE-2022-32870

A logic issue was addressed with improved state management. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. A user with physical access to a device may be able to use Siri to obtain some call history information...

CVE-2022-22677

CVE-2022-22677 describes a logic issue in the handling of concurrent media (WebKit/WebRTC) that could interrupt video self-preview when a phone call is answered. Affected software is Apple platforms implementing WebKit/WebRTC (notably macOS Monterey and iOS/iPadOS in the 12.4/15.5 family). The ro...

CVE-2022-42801

A logic issue was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-42790

CVE-2022-42790 is a logic/state-management issue in Apple platforms that could allow a user to view restricted content from the lock screen. Affected products/versions include macOS Big Sur 11.7, macOS Monterey 12.6, macOS Ventura 13, iOS 16, iOS 15.7, and iPadOS 15.7. The patch guidance in the p...

CVE-2022-42824

CVE-2022-42824 is a WebKitGTK/WebKit runtime logic issue that may disclose sensitive user information when processing malicious web content. The connected advisories confirm WebKitGTK/WebKitGTK-related fixes (CVE-2022-42824) across multiple distributions: Debian DLA-3183-1 and DSA-5274-1 for wpew...

CVE-2022-42824

A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose sensitive user information...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

About the security content of macOS Monterey 12.6.1

About the security content of macOS Monterey 12.6.1 This document describes the security content of macOS Monterey 12.6.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

About the security content of Safari 16.1

About the security content of Safari 16.1 This document describes the security content of Safari 16.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

PT-2022-7235 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: A logic issue was addressed with improved state management, which may allow an app to modify protected parts of the file system. The issue is related to insufficient access control in the Beta Access...

PT-2022-21553 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: A logic issue was addressed with improved checks, allowing a sandboxed process to potentially circumvent sandbox restrictions. Recommendations: For versions prior to 13, update to macOS Ventura 13 to...

PT-2022-26591 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 15.7.1 and 16.1 Apple iPadOS versions prior to 15.7.1 and 16 Apple tvOS versions prior to 16.1 Apple watchOS versions prior to 9.1 Apple macOS versions prior to 12.6.1 and 13 Description: A logic issue was addresse...