by Kastro
Paper/Archive/CVE-2022-32847

CVE-2022-32847

Apple macOS — This issue was addressed with improved checks.

EPSS 4%CVSS 9.1
critical.is priorityof 100
45
CVSS 9.1 (NVD, ADP agree)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 89.3.893 × 2017.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

This issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. A remote user may be able to cause unexpected system termination or corrupt kernel memory.

Affected

ProductAffectedFixed inSource
macOSunspecified – < 12.512.5CNA
macOSunspecified – < 11.611.6CNA
macOSunspecified – < 20222022CNA
tvOSunspecified – < 15.615.6CNA
watchOSunspecified – < 8.78.7CNA
watchOSunspecified – < 15.615.6CNA

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refsupport.apple.com/en-us/HT213345refsupport.apple.com/en-us/HT213340refsupport.apple.com/en-us/HT213342refsupport.apple.com/en-us/HT213346refsupport.apple.com/en-us/HT213344refsupport.apple.com/en-us/HT213343