CVEvulnerability
CVE-2022-32942
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-12-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-125
Description
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2. An app may be able to execute arbitrary code with kernel privileges.
Affected configurations
• apple macos (>= 11.0 < 11.7.2)
• apple macos (>= 12.0.0 < 12.6.2)
• apple macos 13.0
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- http://seclists.org/fulldisclosure/2022/Dec/23 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/24 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/25 Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT213532 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213533 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213534 Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2022/Dec/23 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/24 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/25 Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT213532 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213533 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213534 Release Notes, Vendor Advisory