CVE-2022-32908 — HIGH (7.8)

Q: How severe is CVE-2022-32908?

CVE-2022-32908 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2022-32908?

Check the references section above for vendor advisories and patch information. Affected products include: Apple Ipados, Apple Iphone Os, Apple Macos, Apple Tvos, Apple Watchos.

Vulnerability Description

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. A user may be able to elevate privileges.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Apple	Ipados	< 15.7
Apple	Iphone Os	< 15.7
Apple	Macos	>= 11.0, < 11.7
Apple	Tvos	< 16.0
Apple	Watchos	< 9.0

Related Weaknesses (CWE)

CWE-787

References

http://seclists.org/fulldisclosure/2022/Oct/28Third Party Advisory
http://seclists.org/fulldisclosure/2022/Oct/39
http://seclists.org/fulldisclosure/2022/Oct/41Third Party Advisory
https://support.apple.com/en-us/HT213443Release NotesVendor Advisory
https://support.apple.com/en-us/HT213444Release NotesVendor Advisory
https://support.apple.com/en-us/HT213445Release NotesVendor Advisory
https://support.apple.com/en-us/HT213446Release NotesVendor Advisory
https://support.apple.com/kb/HT213486Release NotesVendor Advisory
https://support.apple.com/kb/HT213487Release NotesVendor Advisory
https://support.apple.com/kb/HT213488Release NotesVendor Advisory
http://seclists.org/fulldisclosure/2022/Oct/28Third Party Advisory
http://seclists.org/fulldisclosure/2022/Oct/39
http://seclists.org/fulldisclosure/2022/Oct/41Third Party Advisory
https://support.apple.com/en-us/HT213443Release NotesVendor Advisory
https://support.apple.com/en-us/HT213444Release NotesVendor Advisory

FAQ

What is CVE-2022-32908?

CVE-2022-32908 is a vulnerability with a CVSS score of 7.8 (HIGH). A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. A user may be able to elevate ...

How severe is CVE-2022-32908?

CVE-2022-32908 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-32908?

Check the references section above for vendor advisories and patch information. Affected products include: Apple Ipados, Apple Iphone Os, Apple Macos, Apple Tvos, Apple Watchos.