CVE-2022-46698

A logic issue was addressed with improved checks. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may disclose sensitive user information...

CVE-2022-42851

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16.2, tvOS 16.2. Parsing a maliciously crafted TIFF file may lead to disclosure of user information...

CVE-2022-42867: Use After Free

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-42845: Out-of-bounds Write

The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app with root privileges may be able to execute arbitrary code with kernel privileges...

CVE-2022-46695: Improper Restriction of Rendered UI Layers or Frames

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Visiting a website that frames malicious content may lead to UI...

CVE-2022-42864: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition was addressed with improved state handling. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-42848

A logic issue in Apple's operating systems allows an application to potentially execute arbitrary code with kernel privileges . This vulnerability affects iOS versions prior to 15.7.2 and 16.2, iPadOS versions prior to 15.7.2 and 16.2, and tvOS versions prior to 16.2. Remediation is available thr...

CVE-2022-46691

A memory consumption issue in the WebKit engine was addressed with improved memory handling. Processing maliciously crafted web content may lead to arbitrary code execution . This vulnerability affects Safari (specifically versions on macOS Big Sur and macOS Monterey), tvOS , macOS Ventura , iOS ...

CVE-2022-46701

CVE-2022-46701 affects Apple TV 4K/HD running tvOS and was mitigated in tvOS 16.2. The Apple TV security content documents a Kernel bound-checks issue: “Connecting to a malicious NFS server may lead to arbitrary code execution with kernel privileges.” This is the root cause and impact described i...

CVE-2022-42867

CVE-2022-42867 is a use-after-free in WebKit/WebKitGTK (WebKitGTK). The root cause is a memory management issue that, when processing malicious web content, could lead to arbitrary code execution. The advisory notes this is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2, iPadOS 16....

CVE-2022-42864

A race condition (Time-of-Check-to-Time-of-Use, TOCTOU) exists in the IOHIDFamily component, specifically within the IOHIDDevice::postElementTransaction function. The vulnerability occurs because the system incorrectly assumes that memory shared with userspace via DriverKit (using md->getBytes...

CVE-2022-42856

A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.1.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this iss...

CVE-2022-42863

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-46700

A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-46696

The CVE-2022-46696 entry describes a memory corruption vulnerability caused by insufficient input validation in web content processing. It affects Apple platforms where the issue is fixed: Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2, iPadOS 16.2, and watchOS 9.2. Successful exploitation ...

CVE-2022-42863

CVE-2022-42863 is a WebKit/WebKitGTK memory corruption issue addressed by improved state management. The CVE entry specifies that processing malicious web content may lead to arbitrary code execution and lists affected platforms/versions: Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2, iPad...

New Actively Exploited Zero-Day Vulnerability Discovered in Apple Products

Apple on Tuesday rolled out security updates to iOS, iPadOS, macOS, tvOS, and Safari web browser to address a new zero-day vulnerability that could result in the execution of malicious code. Tracked as CVE-2022-42856, the issue has been described by the tech giant as a type confusion issue in the...

Apple Releases Security Updates for Multiple Products

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected device. CISA encourages users and administrators to review the Apple security updates page for the following products and app...

PT-2022-7573 · Apple +7 · Icloud For Windows +14

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 16.2 tvOS versions prior to 16.2 iCloud for Windows versions prior to 14.1 macOS Ventura versions prior to 13.1 iOS versions prior to 16.2 iPadOS versions prior to 16.2 watchOS versions prior to 9.2 Description: The...

About the security content of tvOS 16.2

About the security content of tvOS 16.2 This document describes the security content of tvOS 16.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...