Lucene search

K
nvd[email protected]NVD:CVE-2022-32942
HistoryDec 15, 2022 - 7:15 p.m.

CVE-2022-32942

2022-12-1519:15:18
web.nvd.nist.gov
6
cve-2022-32942
macos monterey
macos ventura
macos big sur
arbitrary code execution
kernel privileges

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

41.2%

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2. An app may be able to execute arbitrary code with kernel privileges.

Affected configurations

Nvd
Node
applemacosRange11.011.7.2
OR
applemacosRange12.0.012.6.2
OR
applemacosMatch13.0
VendorProductVersionCPE
applemacos*cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
applemacos13.0cpe:2.3:o:apple:macos:13.0:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

41.2%

Related for NVD:CVE-2022-32942