CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2022-42849
https://notcve.org/view.php?id=CVE-2022-42849
An access issue existed with privileged API calls. This issue was addressed with additional restrictions. This issue is fixed in iOS 16.2 and iPadOS 16.2, tvOS 16.2, watchOS 9.2. A user may be able to elevate privileges. Existía un problema de acceso con las llamadas API privilegiadas. • http://seclists.org/fulldisclosure/2022/Dec/20 http://seclists.org/fulldisclosure/2022/Dec/26 http://seclists.org/fulldisclosure/2022/Dec/27 https://support.apple.com/en-us/HT213530 https://support.apple.com/en-us/HT213535 https://support.apple.com/en-us/HT213536 •
CVSS: 5.3EPSS: 0%CPEs: 3EXPL: 0CVE-2022-32943
https://notcve.org/view.php?id=CVE-2022-32943
The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Shake-to-undo may allow a deleted photo to be re-surfaced without authentication. El problema se solucionó con comprobaciones de los límites mejoradas. Este problema se solucionó en iOS 16.2 y iPadOS 16.2, macOS Ventura 13.1. • http://seclists.org/fulldisclosure/2022/Dec/20 http://seclists.org/fulldisclosure/2022/Dec/23 https://support.apple.com/en-us/HT213530 https://support.apple.com/en-us/HT213532 •
CVSS: 4.3EPSS: 0%CPEs: 3EXPL: 0CVE-2022-32945
https://notcve.org/view.php?id=CVE-2022-32945
An access issue was addressed with additional sandbox restrictions on third-party apps. This issue is fixed in macOS Ventura 13. An app may be able to record audio with paired AirPods. Se solucionó un problema de acceso con restricciones adicionales de sandbox en aplicaciones de terceros. Este problema se solucionó en macOS Ventura 13. • https://support.apple.com/en-us/HT213488 https://support.apple.com/kb/HT213489 •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2022-42862
https://notcve.org/view.php?id=CVE-2022-42862
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. An app may be able to bypass Privacy preferences. Este problema se solucionó eliminando el código vulnerable. Este problema se solucionó en iOS 16.2 y iPadOS 16.2, macOS Ventura 13.1. • http://seclists.org/fulldisclosure/2022/Dec/20 http://seclists.org/fulldisclosure/2022/Dec/23 https://support.apple.com/en-us/HT213530 https://support.apple.com/en-us/HT213532 •
CVSS: 9.8EPSS: 1%CPEs: 7EXPL: 0CVE-2022-42842
https://notcve.org/view.php?id=CVE-2022-42842
The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. A remote user may be able to cause kernel code execution. El problema se solucionó mejorando el manejo de la memoria. Este problema se solucionó en tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 16.2 y iPadOS 16.2, watchOS 9.2. • http://seclists.org/fulldisclosure/2022/Dec/20 http://seclists.org/fulldisclosure/2022/Dec/23 http://seclists.org/fulldisclosure/2022/Dec/24 http://seclists.org/fulldisclosure/2022/Dec/25 http://seclists.org/fulldisclosure/2022/Dec/26 http://seclists.org/fulldisclosure/2022/Dec/27 https://support.apple.com/en-us/HT213530 https://support.apple.com/en-us/HT213532 https://support.apple.com/en-us/HT213533 https://support.apple.com/en-us/HT213534 https://support.apple •