← back
CVE-2022-32908

CVE-2022-32908

CVSS 7.8 HIGHEPSS 0.4%CWE-787
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.8EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
20 Sep 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. A user may be able to elevate privileges.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Apple · iOSApple · macOS
References
http://seclists.org/fulldisclosure/2022/Oct/28http://seclists.org/fulldisclosure/2022/Oct/39http://seclists.org/fulldisclosure/2022/Oct/41https://support.apple.com/en-us/HT213443https://support.apple.com/en-us/HT213444https://support.apple.com/en-us/HT213445https://support.apple.com/en-us/HT213446https://support.apple.com/kb/HT213486https://support.apple.com/kb/HT213487https://support.apple.com/kb/HT213488