CVE-2022-46704

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.1, macOS Big Sur 11.7.2, macOS Monterey 12.6.2. An app may be able to modify protected parts of the file system...

CVE-2023-23508

The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2, macOS Monterey 12.6.3. An app may be able to bypass Privacy preferences...

CVE-2022-46723

CVE-2022-46723 affects macOS Big Sur 11.x and related macOS releases; a remote attacker could write arbitrary files. Apple fixes are in macOS Big Sur 11.7.1 and macOS Monterey 12.6.1. Remediation: update to these versions or later per Apple advisories HT213493/HT213494.

CVE-2022-32902

CVE-2022-32902 in macOS describes a logic issue in state management that may allow an app to bypass Privacy preferences. Fixed in macOS Ventura 13, macOS Monterey 12.6, and macOS Big Sur 11.7; affected components/products are macOS releases listed in the description. No exploitation details are p...

CVE-2023-23514

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, macOS Big Sur 11.7.5. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-23518

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2023-23513

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2, macOS Monterey 12.6.3. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution...

CVE-2022-32896

This CVE (CVE-2022-32896) affects the macOS iMovie runtime and was mitigated by enabling hardened runtime. The issue could allow viewing of sensitive user information and is fixed in macOS Big Sur 11.7 and macOS Monterey 12.6. Users should update to these versions (or newer) to remediate. If upgr...

CVE-2022-31476

Improper access control in the IntelR SUR software before version 2.4.8902 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-33190

Improper input validation in the IntelR SUR software before version 2.4.8902 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-34854

Improper access control in the IntelR SUR software before version 2.4.8902 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-32971

Improper authentication in the IntelR SUR software before version 2.4.8902 may allow a privileged user to potentially enable escalation of privilege via network access...

CVE-2022-31476

Improper access control in the IntelR SUR software before version 2.4.8902 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-30692

Improper conditions check in the IntelR SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2022-33946

Improper authentication in the IntelR SUR software before version 2.4.8902 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-34854

Improper access control in the IntelR SUR software before version 2.4.8902 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-33190

Improper input validation in the IntelR SUR software before version 2.4.8902 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-33964

Improper input validation in the IntelR SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2022-33964

Improper input validation in the IntelR SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2022-32971

Improper authentication in the IntelR SUR software before version 2.4.8902 may allow a privileged user to potentially enable escalation of privilege via network access...