Lucene search
HistorySep 23, 2022 - 8:15 p.m.
CVE-2022-32814
type confusion
state handling
watchos 8.7
tvos 15.6
ios 15.6
ipados 15.6
macos monterey 12.5
arbitrary code
kernel privileges
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
14.3%
A type confusion issue was addressed with improved state handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.
Affected configurations
Node
appleipadosRange<15.6
ORappleiphone_osRange<15.6
ORapplemacosRange11.0–11.6.8
ORapplemacosRange12.0.0–12.5
ORappletvosRange<15.6
ORapplewatchosRange<8.7
Related
cve
cve
CVE-2022-32814
2022-09-23 20:15:09
prion
prion
Type confusion
2022-09-23 20:15:00
cvelist
cvelist
CVE-2022-32814
2022-09-23 00:00:00
apple
apple
About the security content of tvOS 15.6
2022-07-20 00:00:00
About the security content of watchOS 8.7
2022-07-20 00:00:00
About the security content of macOS Big Sur 11.6.8
2022-07-20 00:00:00
openvas
openvas
Apple Mac OS X Security Update (HT213345)
2022-07-22 00:00:00
nessus
nessus
macOS 12.x < 12.5 Multiple Vulnerabilities (HT213345)
2022-08-19 00:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
14.3%
Related for NVD:CVE-2022-32814