Multiple vulnerabilities in macOS Big Sur



Published: 2022-07-21 | Updated: 2022-12-28
Risk High
Patch available YES
Number of vulnerabilities 35
CVE-ID CVE-2022-32815
CVE-2022-32848
CVE-2022-32847
CVE-2022-0158
CVE-2022-0156
CVE-2022-32834
CVE-2022-26704
CVE-2022-32807
CVE-2022-32857
CVE-2022-32843
CVE-2022-32838
CVE-2022-32800
CVE-2022-32786
CVE-2022-32823
CVE-2022-32813
CVE-2022-32811
CVE-2022-32832
CVE-2022-32820
CVE-2022-32826
CVE-2022-32797
CVE-2022-32853
CVE-2022-32851
CVE-2022-32831
CVE-2022-32825
CVE-2022-32805
CVE-2022-32812
CVE-2022-32849
CVE-2022-32839
CVE-2022-32781
CVE-2022-32819
CVE-2022-32787
CVE-2022-32785
CVE-2022-32910
CVE-2022-32814
CVE-2022-32860
CWE-ID CWE-119
CWE-264
CWE-122
CWE-416
CWE-254
CWE-61
CWE-20
CWE-319
CWE-787
CWE-200
CWE-401
CWE-125
CWE-476
CWE-843
Exploitation vector Network
Public exploit Public exploit code for vulnerability #17 is available.
Vulnerable software
Subscribe
macOS
Operating systems & Components / Operating system

Vendor Apple Inc.

Security Bulletin

This security bulletin contains information about 35 vulnerabilities.

1) Buffer overflow

EUVDB-ID: #VU65602

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32815

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in OS kernel. A local application can trigger memory corruption and execute arbitrary code with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

2) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU65624

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32848

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to a logic issue in the Windows Server component. A local application can capture user’s screen.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

3) Buffer overflow

EUVDB-ID: #VU65623

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2022-32847

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service attack.

The vulnerability exists due to a boundary error in the Wi-Fi component. A remote attacker can send specially crafted traffic to the system, trigger memory corruption and perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

4) Heap-based buffer overflow

EUVDB-ID: #VU60767

Risk: High

CVSSv3.1:

CVE-ID: CVE-2022-0158

CWE-ID: CWE-122 - Heap-based Buffer Overflow

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing lines that start with the "$" character. A remote attacker can trick the victim to open a specially crafted file, trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

5) Use-after-free

EUVDB-ID: #VU60766

Risk: High

CVSSv3.1:

CVE-ID: CVE-2022-0156

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when processing lines inside files. A remote attacker can trick the victim to open a specially crafted file, trigger a use-after-free error and execute arbitrary code on the system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

6) Security features bypass

EUVDB-ID: #VU65619

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32834

CWE-ID: CWE-254 - Security Features

Exploit availability: No

Description

The vulnerability allows a local application to gain access to sensitive information.

The vulnerability exists due to an error in TCC. A local application can bypass implemented sandbox restrictions and gain access to sensitive information.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

7) UNIX symbolic link following

EUVDB-ID: #VU63276

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-26704

CWE-ID: CWE-61 - UNIX Symbolic Link (Symlink) Following

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a symlink following issue in Spotlight. A local user can create a specially crafted symbolic link to a critical file on the system and overwrite it with privileges of the application.

Successful exploitation of this vulnerability may result in privilege escalation.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

8) Input validation error

EUVDB-ID: #VU65617

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32807

CWE-ID: CWE-20 - Improper Input Validation

Exploit availability: No

Description

The vulnerability allows a local application to overwrite files on the system.

The vulnerability exists due to insufficient validation of user-supplied input in Spindump. A local application can overwrite arbitrary files.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

9) Cleartext transmission of sensitive information

EUVDB-ID: #VU65616

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32857

CWE-ID: CWE-319 - Cleartext Transmission of Sensitive Information

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to Software Update uses insecure communication channel. A remote attacker on the local network can track user’s activity.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

10) Out-of-bounds write

EUVDB-ID: #VU65610

Risk: High

CVSSv3.1:

CVE-ID: CVE-2022-32843

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing Postscript file in PS Normalizer. A remote attacker can create a specially crafted file, trick the victim into opening it using the affected software, trigger out-of-bounds write and execute arbitrary code on the target system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

11) Information disclosure

EUVDB-ID: #VU65608

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32838

CWE-ID: CWE-200 - Information Exposure

Exploit availability: No

Description

The vulnerability allows a local application to gain access to potentially sensitive information.

The vulnerability exists due to a logic error in PluginKit. A local application can read arbitrary files on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

12) Input validation error

EUVDB-ID: #VU65609

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32800

CWE-ID: CWE-20 - Improper Input Validation

Exploit availability: No

Description

The vulnerability allows a local application to bypass implemented security restrictions.

The vulnerability exists due to insufficient validation of user-supplied input when parsing environment variables in PackageKit. A local application can modify protected parts of the file system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

13) Input validation error

EUVDB-ID: #VU65607

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32786

CWE-ID: CWE-20 - Improper Input Validation

Exploit availability: No

Description

The vulnerability allows a local application to bypass implemented security restrictions.

The vulnerability exists due to insufficient validation of user-supplied input when parsing environment variables in PackageKit. A local application can modify protected parts of the file system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

14) Memory leak

EUVDB-ID: #VU65605

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32823

CWE-ID: CWE-401 - Improper Release of Memory Before Removing Last Reference ('Memory Leak')

Exploit availability: No

Description

The vulnerability allows a local application to gain access to sensitive information.

The vulnerability exists due memory leak in libxml2. A local application can gain access to sensitive information.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

15) Buffer overflow

EUVDB-ID: #VU65601

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32813

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in OS kernel. A local application can trigger memory corruption and execute arbitrary code with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

16) Buffer overflow

EUVDB-ID: #VU65599

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32811

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in Intel Graphics driver. A local application can trigger memory corruption and execute arbitrary code with root privileges.


Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

17) Buffer overflow

EUVDB-ID: #VU65576

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32832

CWE-ID: CWE-119 - Memory corruption

Exploit availability: Yes

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the AppleAPFSUserClient::methodDeltaCreateFinalize() method in APFS. A local user can run a specially crafted program to trigger memory corruption and execute arbitrary code with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

18) Out-of-bounds write

EUVDB-ID: #VU65586

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32820

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error when processing untrusted input within he Audio component. A local application can trigger an out-of-bounds write error and execute arbitrary code with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

19) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU65577

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32826

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improperly imposed security restrictions in AppleMobileFileIntegrity. A local user can execute arbitrary code with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

20) Out-of-bounds read

EUVDB-ID: #VU65581

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2022-32797

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the TASUnparser_PrintObject in AppleScript.framework. A remote attacker can create a specially crafted SCPT file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

21) Out-of-bounds read

EUVDB-ID: #VU65584

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2022-32853

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition when handling AppleScript. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

22) Out-of-bounds read

EUVDB-ID: #VU65582

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2022-32851

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition when handling AppleScript. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

23) Out-of-bounds read

EUVDB-ID: #VU65585

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2022-32831

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition when handling AppleScript. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

24) Buffer overflow

EUVDB-ID: #VU65587

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32825

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to a boundary error in Audio component. A local user can run a specially crafted program to trigger memory corruption and gain access to sensitive information.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

25) Information disclosure

EUVDB-ID: #VU65589

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32805

CWE-ID: CWE-200 - Information Exposure

Exploit availability: No

Description

The vulnerability allows a local application to gain access to potentially sensitive information.

The vulnerability exists due to insecure cache implementation in Calendar component. A local application can gain unauthorized access to sensitive information on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

26) Buffer overflow

EUVDB-ID: #VU65600

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32812

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in Intel Graphics driver. A local application can trigger memory corruption and execute arbitrary code with root privileges.


Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

27) Information disclosure

EUVDB-ID: #VU65595

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32849

CWE-ID: CWE-200 - Information Exposure

Exploit availability: No

Description

The vulnerability allows a local application to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output in iCloud Photo Library. A local application can gain unauthorized access to sensitive information on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

28) Buffer overflow

EUVDB-ID: #VU65591

Risk: High

CVSSv3.1:

CVE-ID: CVE-2022-32839

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in CoreText. A remote attacker can create a specially crafted document, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

29) Information disclosure

EUVDB-ID: #VU65625

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32781

CWE-ID: CWE-200 - Information Exposure

Exploit availability: No

Description

The vulnerability allows a local application to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output in FaceTime. A local application can gain unauthorized access to sensitive information on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

30) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU65592

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32819

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to improperly imposed security restrictions in File System Events. A local application can gain root privileges on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

31) Out-of-bounds write

EUVDB-ID: #VU65596

Risk: High

CVSSv3.1:

CVE-ID: CVE-2022-32787

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error in ICU components when processing untrusted input. A remote attacker can create a specially crafted file, trick the victim into opening it using the affected software, trigger out-of-bounds write and execute arbitrary code on the target system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

32) NULL pointer dereference

EUVDB-ID: #VU65598

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32785

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in ImageIO. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

33) Input validation error

EUVDB-ID: #VU68711

Risk: High

CVSSv3.1:

CVE-ID: CVE-2022-32910

CWE-ID: CWE-20 - Improper Input Validation

Exploit availability: No

Description

The vulnerability allows a remote attacker to bypass implemented security restrictions.

The vulnerability exists due to insufficient validation when processing archives in Archive Utility. A remote attacker can trick the victim to open a specially crafted archive and bypass Gatekeeper protection features.

Successful exploitation of the vulnerability may lead to entire system compromise.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

34) Type Confusion

EUVDB-ID: #VU65606

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32814

CWE-ID: CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a type confusion error in Multi-Touch. A local application can trigger a type confusion error and execute arbitrary code with kernel privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

35) Out-of-bounds write

EUVDB-ID: #VU70512

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32860

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error within the Wi-Fi subsystem. A local application can trigger an out-of-bounds write error and execute arbitrary code with kernel privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 11.0 20A2411 - 11.6.7 20G630


CPE2.3 External links

http://support.apple.com/en-us/HT213344

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?



###SIDEBAR###