CVSS: 8.8EPSS: 0%CPEs: 4EXPL: 0CVE-2022-32885 – webkitgtk: Memory corruption issue when processing web content
https://notcve.org/view.php?id=CVE-2022-32885
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution A vulnerability was found in WebKitGTK. This security issue occurs when processing maliciously crafted web content that may lead to arbitrary code execution. This memory corruption issue was addressed with improved validation. • https://support.apple.com/en-us/HT213341 https://support.apple.com/en-us/HT213345 https://support.apple.com/en-us/HT213346 https://access.redhat.com/security/cve/CVE-2022-32885 https://bugzilla.redhat.com/show_bug.cgi?id=2236842 • CWE-20: Improper Input Validation CWE-787: Out-of-bounds Write •
CVSS: 2.4EPSS: 0%CPEs: 1EXPL: 0CVE-2022-32871
https://notcve.org/view.php?id=CVE-2022-32871
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16. A person with physical access to a device may be able to use Siri to access private calendar information • https://support.apple.com/en-us/HT213446 •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-46709
https://notcve.org/view.php?id=CVE-2022-46709
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, iOS 16. An app may be able to execute arbitrary code with kernel privileges • https://support.apple.com/en-us/HT213446 https://support.apple.com/en-us/HT213488 • CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2022-46716
https://notcve.org/view.php?id=CVE-2022-46716
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2. Private Relay functionality did not match system settings • https://support.apple.com/en-us/HT213530 https://support.apple.com/en-us/HT213532 •
CVSS: 2.4EPSS: 0%CPEs: 2EXPL: 0CVE-2022-46717
https://notcve.org/view.php?id=CVE-2022-46717
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16.2 and iPadOS 16.2. A user with physical access to a locked Apple Watch may be able to view user photos via accessibility features • https://support.apple.com/en-us/HT213530 https://support.apple.com/kb/HT213536 •