3264 matches found
Information disclosure
This issue was addressed with improved checks. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of process memory...
CVE-2022-32831
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of process memory...
CVE-2022-32851
CVE-2022-32851 describes an out-of-bounds read in the handling of a malicious AppleScript binary. The issue was fixed by the macOS Security Update 2022-005, applying to Catalina, Big Sur 11.6.8, and Monterey 12.5. Impact, as stated, is that processing such AppleScript binaries may cause unexpecte...
CVE-2022-32848
A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to capture a user’s screen...
CVE-2022-32832
CVE-2022-32832: Apple security issue tied to memory handling that could allow an app with root privileges to execute arbitrary code with kernel privileges. The vulnerability is addressed via updates across Apple operating systems, including iOS 15.6/iPadOS 15.6, macOS Big Sur 11.6.8, macOS Monter...
CVE-2022-32848
CVE-2022-32848 affects macOS Big Sur 11.6.8 and macOS Monterey 12.5. Root cause: a logic issue addressed by improved checks. Impact: an app may be able to capture a user’s screen. Remediation: fixed in macOS Big Sur 11.6.8 and macOS Monterey 12.5. Exploitation details are not provided in the avai...
CVE-2022-32826
An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to gain root privileges...
CVE-2022-32823
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to leak sensitive user information...
CVE-2022-32820
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to execute arbitrary code with kernel privileges...
CVE-2022-32807
CVE-2022-32807 affects macOS: Catalina, Big Sur (11.6.8) and Monterey (12.5). The issue arises from improper file handling, allowing an app to overwrite arbitrary files. It is tracked with a CVSS v3.1 base score of 7.1 (HIGH) with LOCAL attack vector, low attack complexity, no privileges required...
CVE-2022-32807
This issue was addressed with improved file handling. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to overwrite arbitrary files...
CVE-2022-32815
The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app with root privileges may be able to execute arbitrary code with kernel privileges...
CVE-2022-32800
This issue was addressed with improved checks. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to modify protected parts of the file system...
CVE-2022-32800
This issue was addressed with improved checks. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to modify protected parts of the file system...
CVE-2022-32800
CVE-2022-32800 refers to a vulnerability in macOS where an app may modify protected parts of the file system. The connected sources indicate this was addressed by Apple in Security Update 2022-005, with affected macOS versions including Catalina, Big Sur 11.6.8, and Monterey 12.5. The root cause ...
CVE-2022-32843
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted Postscript file may result in unexpected app termination or disclosure of process memory...
CVE-2022-32843
CVE-2022-32843 is an out-of-bounds write vulnerability addressed by Apple's Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, and macOS Monterey 12.5. Processing a maliciously crafted PostScript file may cause an app to terminate or disclose process memory. Exploitation would be local (att...
CVE-2022-32797
CVE-2022-32797 affects macOS where processing a maliciously crafted AppleScript binary could terminate the process or disclose process memory. Root cause: improved checks now address this issue. Remediation: apply Security Update 2022-005 for Catalina, macOS Big Sur 11.6.8, and macOS Monterey 12....
CVE-2022-32853
CVE-2022-32853 is an out-of-bounds read in processing a malicious AppleScript binary. Affects macOS via AppleScript handling; root cause is improper input validation. Impact described as possible termination or disclosure of process memory. Mitigation: apply Security Update 2022-005 Catalina, mac...
CVE-2022-32786
An issue in the handling of environment variables was addressed with improved validation. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to modify protected parts of the file system...