Lucene search

AppleCVE-2022-32851

HistorySep 23, 2022 - 7:15 p.m.

CVE-2022-32851

2022-09-2319:15:13

CWE-125

apple

web.nvd.nist.gov

cve

2022

32851

security update

catalina

big sur

monterey

out-of-bounds read

input validation

applescript binary

memory disclosure

nvd

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

31.9%

JSON

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of process memory.

Affected configurations

Nvd

Vulners

Node

applemac_os_xMatch10.15.7security_update_2020-001

applemac_os_xMatch10.15.7security_update_2021-001

applemac_os_xMatch10.15.7security_update_2021-002

applemac_os_xMatch10.15.7security_update_2021-003

applemac_os_xMatch10.15.7security_update_2021-004

applemac_os_xMatch10.15.7security_update_2021-005

applemac_os_xMatch10.15.7security_update_2021-006

applemac_os_xMatch10.15.7security_update_2021-007

applemac_os_xMatch10.15.7security_update_2021-008

applemac_os_xMatch10.15.7security_update_2022-001

applemac_os_xMatch10.15.7security_update_2022-002

applemac_os_xMatch10.15.7security_update_2022-003

applemacosRange<10.15.7

applemacosRange11.0–11.6.8

applemacosRange12.0–12.5

applemacosMatch10.15.7-

applemacosMatch10.15.7security_update_2022-004

VendorProductVersionCPE
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-004:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-005:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-007:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-008:*:*:*:*:*:*
applemac_os_x10.15.7cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-001:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-004::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-005::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-007::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-008::::::
apple	mac_os_x	10.15.7	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-001::::::

Rows per page:

1-10 of 151

CNA Affected

[
  {
    "product": "macOS",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "12.5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "macOS",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "11.6",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "macOS",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "2022",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

support.apple.com/en-us/HT213343

support.apple.com/en-us/HT213344

support.apple.com/en-us/HT213345

Social References

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

31.9%

JSON

Related for CVE-2022-32851