Multiple vulnerabilities in macOS Catalina



Published: 2022-07-21 | Updated: 2022-10-25
Risk High
Patch available YES
Number of vulnerabilities 40
CVE-ID CVE-2021-4136
CVE-2022-32843
CVE-2022-32842
CVE-2022-32799
CVE-2022-32857
CVE-2022-32807
CVE-2022-26704
CVE-2022-32834
CVE-2021-4166
CVE-2022-32800
CVE-2021-4173
CVE-2021-4187
CVE-2021-4192
CVE-2021-4193
CVE-2021-46059
CVE-2022-0128
CVE-2022-32847
CVE-2022-32838
CVE-2022-32786
CVE-2022-32832
CVE-2022-32849
CVE-2022-32826
CVE-2022-32797
CVE-2022-32853
CVE-2022-32851
CVE-2022-32831
CVE-2022-32820
CVE-2022-32805
CVE-2022-32839
CVE-2022-32823
CVE-2022-32781
CVE-2022-32819
CVE-2022-32787
CVE-2022-32785
CVE-2022-32812
CVE-2022-32811
CVE-2022-32815
CVE-2022-32813
CVE-2022-32837
CVE-2022-32910
CWE-ID CWE-122
CWE-787
CWE-125
CWE-319
CWE-20
CWE-61
CWE-254
CWE-415
CWE-416
CWE-476
CWE-119
CWE-200
CWE-264
CWE-401
Exploitation vector Network
Public exploit Public exploit code for vulnerability #20 is available.
Vulnerable software
Subscribe
macOS
Operating systems & Components / Operating system

Vendor Apple Inc.

Security Bulletin

This security bulletin contains information about 40 vulnerabilities.

1) Heap-based buffer overflow

EUVDB-ID: #VU60794

Risk: High

CVSSv3.1:

CVE-ID: CVE-2021-4136

CWE-ID: CWE-122 - Heap-based Buffer Overflow

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error. A remote attacker can trick the victim to open a specially crafted file, trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

2) Out-of-bounds write

EUVDB-ID: #VU65610

Risk: High

CVSSv3.1:

CVE-ID: CVE-2022-32843

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing Postscript file in PS Normalizer. A remote attacker can create a specially crafted file, trick the victim into opening it using the affected software, trigger out-of-bounds write and execute arbitrary code on the target system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

3) Out-of-bounds read

EUVDB-ID: #VU65612

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32842

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in SMB component. A local application can trigger an out-of-bounds read error and execute arbitrary code with escalated privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

4) Out-of-bounds read

EUVDB-ID: #VU65614

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32799

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in SMB component. A local user can trigger an out-of-bounds read error and read contents of memory on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

5) Cleartext transmission of sensitive information

EUVDB-ID: #VU65616

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32857

CWE-ID: CWE-319 - Cleartext Transmission of Sensitive Information

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to Software Update uses insecure communication channel. A remote attacker on the local network can track user’s activity.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

6) Input validation error

EUVDB-ID: #VU65617

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32807

CWE-ID: CWE-20 - Improper Input Validation

Exploit availability: No

Description

The vulnerability allows a local application to overwrite files on the system.

The vulnerability exists due to insufficient validation of user-supplied input in Spindump. A local application can overwrite arbitrary files.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

7) UNIX symbolic link following

EUVDB-ID: #VU63276

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-26704

CWE-ID: CWE-61 - UNIX Symbolic Link (Symlink) Following

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a symlink following issue in Spotlight. A local user can create a specially crafted symbolic link to a critical file on the system and overwrite it with privileges of the application.

Successful exploitation of this vulnerability may result in privilege escalation.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

8) Security features bypass

EUVDB-ID: #VU65619

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32834

CWE-ID: CWE-254 - Security Features

Exploit availability: No

Description

The vulnerability allows a local application to gain access to sensitive information.

The vulnerability exists due to an error in TCC. A local application can bypass implemented sandbox restrictions and gain access to sensitive information.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

9) Out-of-bounds read

EUVDB-ID: #VU60793

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2021-4166

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to crash the application.

The vulnerability exists due to a boundary condition. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger out-of-bounds read error and crash the application.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

10) Input validation error

EUVDB-ID: #VU65609

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32800

CWE-ID: CWE-20 - Improper Input Validation

Exploit availability: No

Description

The vulnerability allows a local application to bypass implemented security restrictions.

The vulnerability exists due to insufficient validation of user-supplied input when parsing environment variables in PackageKit. A local application can modify protected parts of the file system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

11) Double Free

EUVDB-ID: #VU60792

Risk: High

CVSSv3.1:

CVE-ID: CVE-2021-4173

CWE-ID: CWE-415 - Double Free

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error. A remote attacker can trick the victim to open a specially crafted file, trigger double free error and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

12) Double Free

EUVDB-ID: #VU60791

Risk: High

CVSSv3.1:

CVE-ID: CVE-2021-4187

CWE-ID: CWE-415 - Double Free

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error. A remote attacker can trick the victim to open a specially crafted file, trigger double free error and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

13) Use-after-free

EUVDB-ID: #VU60790

Risk: High

CVSSv3.1:

CVE-ID: CVE-2021-4192

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error. A remote attacker can trick the victim to open a specially crafted file, trigger a use-after-free error and execute arbitrary code on the system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

14) Out-of-bounds read

EUVDB-ID: #VU60789

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2021-4193

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to crash the application.

The vulnerability exists due to a boundary condition. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger out-of-bounds read error and crash the application.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

15) NULL pointer dereference

EUVDB-ID: #VU61332

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2021-46059

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the vim_regexec_multi() function in regexp.c in Vim. A remote attacker can trick the victim to open a specially crafted file and perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

16) Out-of-bounds read

EUVDB-ID: #VU60788

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-0128

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to crash the application.

The vulnerability exists due to a boundary condition. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger out-of-bounds read error and crash the application.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

17) Buffer overflow

EUVDB-ID: #VU65623

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2022-32847

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service attack.

The vulnerability exists due to a boundary error in the Wi-Fi component. A remote attacker can send specially crafted traffic to the system, trigger memory corruption and perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

18) Information disclosure

EUVDB-ID: #VU65608

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32838

CWE-ID: CWE-200 - Information Exposure

Exploit availability: No

Description

The vulnerability allows a local application to gain access to potentially sensitive information.

The vulnerability exists due to a logic error in PluginKit. A local application can read arbitrary files on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

19) Input validation error

EUVDB-ID: #VU65607

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32786

CWE-ID: CWE-20 - Improper Input Validation

Exploit availability: No

Description

The vulnerability allows a local application to bypass implemented security restrictions.

The vulnerability exists due to insufficient validation of user-supplied input when parsing environment variables in PackageKit. A local application can modify protected parts of the file system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

20) Buffer overflow

EUVDB-ID: #VU65576

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32832

CWE-ID: CWE-119 - Memory corruption

Exploit availability: Yes

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the AppleAPFSUserClient::methodDeltaCreateFinalize() method in APFS. A local user can run a specially crafted program to trigger memory corruption and execute arbitrary code with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

21) Information disclosure

EUVDB-ID: #VU65595

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32849

CWE-ID: CWE-200 - Information Exposure

Exploit availability: No

Description

The vulnerability allows a local application to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output in iCloud Photo Library. A local application can gain unauthorized access to sensitive information on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

22) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU65577

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32826

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improperly imposed security restrictions in AppleMobileFileIntegrity. A local user can execute arbitrary code with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

23) Out-of-bounds read

EUVDB-ID: #VU65581

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2022-32797

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the TASUnparser_PrintObject in AppleScript.framework. A remote attacker can create a specially crafted SCPT file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

24) Out-of-bounds read

EUVDB-ID: #VU65584

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2022-32853

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition when handling AppleScript. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

25) Out-of-bounds read

EUVDB-ID: #VU65582

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2022-32851

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition when handling AppleScript. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

26) Out-of-bounds read

EUVDB-ID: #VU65585

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2022-32831

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition when handling AppleScript. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

27) Out-of-bounds write

EUVDB-ID: #VU65586

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32820

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error when processing untrusted input within he Audio component. A local application can trigger an out-of-bounds write error and execute arbitrary code with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

28) Information disclosure

EUVDB-ID: #VU65589

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32805

CWE-ID: CWE-200 - Information Exposure

Exploit availability: No

Description

The vulnerability allows a local application to gain access to potentially sensitive information.

The vulnerability exists due to insecure cache implementation in Calendar component. A local application can gain unauthorized access to sensitive information on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

29) Buffer overflow

EUVDB-ID: #VU65591

Risk: High

CVSSv3.1:

CVE-ID: CVE-2022-32839

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in CoreText. A remote attacker can create a specially crafted document, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

30) Memory leak

EUVDB-ID: #VU65605

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32823

CWE-ID: CWE-401 - Improper Release of Memory Before Removing Last Reference ('Memory Leak')

Exploit availability: No

Description

The vulnerability allows a local application to gain access to sensitive information.

The vulnerability exists due memory leak in libxml2. A local application can gain access to sensitive information.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

31) Information disclosure

EUVDB-ID: #VU65625

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32781

CWE-ID: CWE-200 - Information Exposure

Exploit availability: No

Description

The vulnerability allows a local application to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output in FaceTime. A local application can gain unauthorized access to sensitive information on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

32) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU65592

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32819

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to improperly imposed security restrictions in File System Events. A local application can gain root privileges on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

33) Out-of-bounds write

EUVDB-ID: #VU65596

Risk: High

CVSSv3.1:

CVE-ID: CVE-2022-32787

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error in ICU components when processing untrusted input. A remote attacker can create a specially crafted file, trick the victim into opening it using the affected software, trigger out-of-bounds write and execute arbitrary code on the target system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

34) NULL pointer dereference

EUVDB-ID: #VU65598

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32785

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in ImageIO. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

35) Buffer overflow

EUVDB-ID: #VU65600

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32812

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in Intel Graphics driver. A local application can trigger memory corruption and execute arbitrary code with root privileges.


Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

36) Buffer overflow

EUVDB-ID: #VU65599

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32811

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in Intel Graphics driver. A local application can trigger memory corruption and execute arbitrary code with root privileges.


Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

37) Buffer overflow

EUVDB-ID: #VU65602

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32815

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in OS kernel. A local application can trigger memory corruption and execute arbitrary code with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

38) Buffer overflow

EUVDB-ID: #VU65601

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32813

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in OS kernel. A local application can trigger memory corruption and execute arbitrary code with root privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

39) Out-of-bounds write

EUVDB-ID: #VU65622

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-32837

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to a boundary error in the Wi-Fi component. A local application can trigger memory corruption and perform a denial of service attack or execute arbitrary code on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

40) Input validation error

EUVDB-ID: #VU68711

Risk: High

CVSSv3.1:

CVE-ID: CVE-2022-32910

CWE-ID: CWE-20 - Improper Input Validation

Exploit availability: No

Description

The vulnerability allows a remote attacker to bypass implemented security restrictions.

The vulnerability exists due to insufficient validation when processing archives in Archive Utility. A remote attacker can trick the victim to open a specially crafted archive and bypass Gatekeeper protection features.

Successful exploitation of the vulnerability may lead to entire system compromise.

Mitigation

Install update from vendor's website.

Vulnerable software versions

macOS: 10.15 19A583 - 10.15.7 19H1922


CPE2.3 External links

http://support.apple.com/en-us/HT213343

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?



###SIDEBAR###