CVEvulnerability
CVE-2022-32845
10.0 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2022-09-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 10.0 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 10.0 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- Weaknesses
- CWE-693
Description
This issue was addressed with improved checks. This issue is fixed in watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to break out of its sandbox.
Affected configurations
• apple ipados (< 15.6)
• apple iphone os (< 15.6)
• apple macos (>= 12.0 < 12.5)
• apple watchos (< 8.7)
Related
Weakness · CWE (1)
- CWE-693 Protection Mechanism Failure weakness
References
- https://support.apple.com/en-us/HT213340 Vendor Advisory
- https://support.apple.com/en-us/HT213345 Vendor Advisory
- https://support.apple.com/en-us/HT213346 Vendor Advisory
- https://support.apple.com/en-us/HT213340 Vendor Advisory
- https://support.apple.com/en-us/HT213345 Vendor Advisory
- https://support.apple.com/en-us/HT213346 Vendor Advisory