Skip to content
OpenAdvisories
High 1 exploited CVE WID-SEC-2022-1394 18 CVEs

Apple iOS und Apple iPadOS: Mehrere Schwachstellen

Published Sep 12, 2022 · Updated Apr 13, 2023 · Revision 3 · de-DE

Vendor: Apple Product: iOS Product: iOS < 15.7 Product: iOS < 16 Product: iPadOS < 15.7 Platform: iOS

Summary

Ein entfernter, anonymer, lokaler oder physischer Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um Sicherheitsmaßnahmen zu umgehen, seine Privilegien zu erweitern, vertrauliche Informationen offenzulegen, beliebigen Code auszuführen und Informationen falsch darzustellen.

Product

Das Apple iOS (vormals iPhone OS) ist das Betriebssystem für das von Apple entwickelte Smartphone iPhone, iPad und iPod Touch.
Das Apple iPadOS ist das Betriebssystem für das von Apple entwickelte iPad.

Vulnerabilities 18

  • High 7.8
    CVE-2022-32917 Exploited

    The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15…

    Apple macOS iOS macOS iOS
    KEV Sep 14, 2022
  • Critical 9.8
    CVE-2022-46709

    A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, iOS 16…

    Apple macOS macOS
  • High 8.8
    CVE-2022-32886

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7…

    Apple iOS and iPadOS Safari iOS iOS Browsers Debian Ubuntu
  • High 8.8
    CVE-2022-32912

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 a…

    Apple iOS and iPadOS Safari iOS iOS Browsers
  • High 7.8
    CVE-2022-32887

    The issue was addressed with improved memory handling. This issue is fixed in iOS 16. An app may be able to execute arb…

    Apple iOS iOS
  • High 7.8
    CVE-2022-32889

    The issue was addressed with improved memory handling. This issue is fixed in iOS 16, watchOS 9. An app may be able to …

    Apple watchOS iOS iOS
  • High 7.8
    CVE-2022-32908

    A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6, iOS…

    Apple macOS iOS macOS iOS
  • High 7.8
    CVE-2022-32911

    The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS …

    Apple macOS iOS macOS iOS
  • High 7.1
    CVE-2022-32925

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16, iOS 16, watch…

    Apple watchOS iOS iOS
  • Medium 5.5
    CVE-2022-32883 Public exploit

    A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS…

    Apple macOS iOS macOS iOS
  • Medium 5.5
    CVE-2022-32916

    An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input…

    Apple iOS iOS
  • Medium 5.3
    CVE-2022-32833

    An issue existed with the file paths used to store website data. The issue was resolved by improving how website data i…

    Apple iOS iOS
  • Low 2.4
    CVE-2022-32871

    A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16. A person with physical access to…

    Apple iOS iOS
  • Low 2.4
    CVE-2022-32872

    A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, iOS 15.7 and iPadOS 15.7. A pers…

    Apple iOS and iPadOS iOS iOS
  • Unscored —
    CVE-2022-32795

    This issue was addressed with improved checks. This issue is fixed in iOS 16, iOS 15.7 and iPadOS 15.7. Visiting a mali…

    Apple iOS and iPadOS iOS iOS
  • Unscored —
    CVE-2022-32854

    This issue was addressed with improved checks. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 1…

    Apple macOS iOS macOS iOS
  • Unscored —
    CVE-2022-32864

    The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS …

    Apple macOS iOS macOS iOS
  • Unscored —
    CVE-2022-32868

    A logic issue was addressed with improved state management. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPad…

    Apple iOS and iPadOS Safari iOS iOS Browsers

Revision history

  1. #3

    CVE Nummern ergänzt

  2. #2

    CVE's ergänzt

  3. #1

    Initiale Fassung

References