CVE-2022-32926

CVSS 6.7 MEDIUMEPSS 0.3%CWE-119

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 6.7EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

01 nov 2022Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16. An app with root privileges may be able to execute arbitrary code with kernel privileges.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Apple · macOS Apple · tvOS Apple · watchOS

Referencias

https://support.apple.com/en-us/HT213488 https://support.apple.com/en-us/HT213489 https://support.apple.com/en-us/HT213490 https://support.apple.com/en-us/HT213491 https://support.apple.com/en-us/HT213492