Description
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An app may be able to read sensitive location information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apple | iOS | unspecified – < 16 | 16 |
| Apple | macOS | unspecified – < 11.7, unspecified – < 15.7, unspecified – < 12.6 | 11.7 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 1 repository
-
breakpointHQ/CVE-2022-32883 ★ 18 · Sep 18, 2022
Turning Your Computer Into a GPS Tracker With Apple Maps
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 2
- WID-SEC-2022-1846 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 11, 2026
- WID-SEC-2022-1394 Apple iOS und Apple iPadOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 13, 2023
References
- https://support.apple.com/en-us/HT213446
- https://support.apple.com/en-us/HT213443
- https://support.apple.com/en-us/HT213445
- https://support.apple.com/en-us/HT213444
- https://support.apple.com/kb/HT213488
- https://support.apple.com/kb/HT213486
- 20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13 mailing-list
- 20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13 mailing-list
- 20221030 APPLE-SA-2022-10-27-3 Additional information for APPLE-SA-2022-09-12-1 iOS 16 mailing-list
- 20221030 APPLE-SA-2022-10-27-4 Additional information for APPLE-SA-2022-09-12-2 iOS 15.7 and iPadOS 15.7 mailing-list
- 20221030 APPLE-SA-2022-10-27-13 watchOS 9 mailing-list
- 20221030 APPLE-SA-2022-10-27-7 Additional information for APPLE-SA-2022-09-12-4 macOS Monterey 12.6 mailing-list
- 20221030 APPLE-SA-2022-10-27-9 Additional information for APPLE-SA-2022-09-12-3 macOS Big Sur 11.7 mailing-list