CVE-2022-42865: Improper Access Control

This issue was addressed by enabling hardened runtime. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. An app may be able to bypass Privacy preferences...

CVE-2022-46692

A logic issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may bypass Same Origin Policy...

CVE-2022-46690

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-42851: Out-of-bounds Read

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16.2, tvOS 16.2. Parsing a maliciously crafted TIFF file may lead to disclosure of user information...

CVE-2022-42842

CVE-2022-42842 affects Apple platforms and is tied to a kernel memory handling issue that could allow remote code execution. The CVE is listed among Apple TV vulnerabilities in the Apple TV 16.2 and related macOS/iOS/watchOS updates as fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1...

CVE-2022-42851

CVE-2022-42851 involves an information disclosure vulnerability in Apple's ImageIO/TIFF handling that is fixed in iOS 16.2, iPadOS 16.2, and tvOS 16.2. The root cause is described as improved memory handling during parsing of maliciously crafted TIFF files, which may lead to disclosure of user in...

CVE-2022-46700: Out-of-bounds Write

A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-46690

An out-of-bounds write issue exists in several Apple products, caused by insufficient input validation. This vulnerability could allow an application to execute arbitrary code with kernel privileges . The issue is addressed in iOS 16.2 , iPadOS 16.2 , macOS Ventura 13.1 , tvOS 16.2 , and watchOS ...

CVE-2022-46693

The CVE-2022-46693 entry describes an out-of-bounds write vulnerability addressed by input-validation improvements. Affected products/versions include tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2, iPadOS 16.2, and watchOS 9.2. The issue can be triggered by processing a malicio...

CVE-2022-46691

A memory consumption issue was addressed with improved memory handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-46695

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Visiting a website that frames malicious content may lead to UI...

CVE-2022-46698

CVE-2022-46698 is a logic issue in WebKitGTK where processing malicious web content may disclose sensitive user information. Multiple connected advisories confirm this issue in WebKitGTK/WebKit2GTK components and list it among fixed CVEs after updates to WebKitGTK packages. Affected products incl...

CVE-2022-42865

This CVE (CVE-2022-42865) concerns Apple platforms and is addressed by enabling hardened runtime. It is fixed in iOS 16.2, iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, and watchOS 9.2. The issue allows an app to bypass Privacy preferences. The connected documents corroborate: the vulnerability is ...

CVE-2022-46695

A spoofing issue exists in the URL handling of several Apple operating systems due to insufficient input validation. A user visiting a website that frames malicious content may experience UI spoofing . This vulnerability has been addressed in tvOS 16.2 , macOS Ventura 13.1 , iOS 15.7.2 , iPadOS 1...

CVE-2022-42843

Affected software includes iOS 16.2 , iPadOS 16.2 , macOS Ventura 13.1 , tvOS 16.2 , and watchOS 9.2 . The vulnerability allows a user to potentially view sensitive user information due to insufficient data protection measures. This issue has been addressed with improved data protection in the sp...

CVE-2022-46699

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-42867

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-42842

The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. A remote user may be able to cause kernel code execution...

CVE-2022-42843

This issue was addressed with improved data protection. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. A user may be able to view sensitive user information...

CVE-2022-42855

A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2. An app may be able to use arbitrary entitlements...