CVE-2022-32781

This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5, Security Update 2022-005 Catalina, macOS Big Sur 11.6.8. An app with root privileges may be able to access private information.

CVSS v3 4.4 MEDIUM

4.4^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://support.apple.com/en-us/HT213257	Vendor Advisory
https://support.apple.com/en-us/HT213258	Vendor Advisory
https://support.apple.com/en-us/HT213343	Vendor Advisory
https://support.apple.com/en-us/HT213344	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:iphone_os::::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-004::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-005::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-007::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-008::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-001::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-002::::::
	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-003::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos:10.15.7:-::::::
	cpe:2.3:o:apple:macos:10.15.7:security_update_2022-004::::::

History

09 Jan 2023, 16:41

Type	Values Removed	Values Added
First Time		Apple ipados
CPE	cpe:2.3:o:apple:ipad_os::::::::	cpe:2.3:o:apple:ipados::::::::

02 Nov 2022, 13:18

Type	Values Removed	Values Added
First Time		Apple mac Os X
CPE	cpe:2.3:o:apple:macos:10.15.7:security_update_2022-001:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2022-002:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-007:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-006:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-004:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2022-003:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2020-001:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-002:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-008:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-005:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-003:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-001::::::	cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-007:::::: cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:::::: cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-001:::::: cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:::::: cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-008:::::: cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:::::: cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-005:::::: cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-002:::::: cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:::::: cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-004:::::: cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006:::::: cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2022-003::::::

28 Sep 2022, 12:15

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 4.4
CWE		NVD-CWE-noinfo
First Time		Apple macos Apple ipad Os Apple iphone Os Apple
CPE		cpe:2.3:o:apple:macos:10.15.7:security_update_2021-004:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2022-001:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-001:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2020-001:::::: cpe:2.3:o:apple:iphone_os:::::::: cpe:2.3:o:apple:ipad_os:::::::: cpe:2.3:o:apple:macos:10.15.7:-:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2022-002:::::: cpe:2.3:o:apple:macos:::::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2022-004:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-003:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-002:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-008:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2022-003:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-005:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-006:::::: cpe:2.3:o:apple:macos:10.15.7:security_update_2021-007::::::
References	~~(MISC) https://support.apple.com/en-us/HT213344 -~~	(MISC) https://support.apple.com/en-us/HT213344 - Vendor Advisory
References	~~(MISC) https://support.apple.com/en-us/HT213257 -~~	(MISC) https://support.apple.com/en-us/HT213257 - Vendor Advisory
References	~~(MISC) https://support.apple.com/en-us/HT213343 -~~	(MISC) https://support.apple.com/en-us/HT213343 - Vendor Advisory
References	~~(MISC) https://support.apple.com/en-us/HT213258 -~~	(MISC) https://support.apple.com/en-us/HT213258 - Vendor Advisory

23 Sep 2022, 19:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2022-09-23 19:15

Updated : 2023-12-10 14:35

NVD link : CVE-2022-32781

Mitre link : CVE-2022-32781

CVE.ORG link : CVE-2022-32781

JSON object : View

Products Affected

apple

macos
iphone_os
mac_os_x
ipados

CWE

NVD-CWE-noinfo

4.4 /10