Search for vulnerabilities
Vulnerability details: VCID-z8ss-s1er-aaaj
Vulnerability ID VCID-z8ss-s1er-aaaj
Aliases CVE-2022-32793
Summary Multiple out-of-bounds write issues were addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6. An app may be able to disclose kernel memory.
Status Published
Exploitability 0.5
Weighted Severity 6.8
Risk 3.4
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-787 Out-of-bounds Write
System Score Found at
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00172 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00172 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00172 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00172 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00172 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00172 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00172 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00172 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00172 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00172 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00172 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00172 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00172 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00172 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00172 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00172 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00172 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00172 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00172 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00172 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00172 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00172 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00233 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00233 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00233 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00233 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00233 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00233 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00233 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00233 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00233 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00233 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00233 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00233 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00235 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00235 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00235 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00235 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
epss 0.00374 https://api.first.org/data/v1/epss?cve=CVE-2022-32793
cvssv3.1 7.5 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7SETAAXEPGNBMYKTUDFEZHS5LGSQ64QL/
ssvc Track https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7SETAAXEPGNBMYKTUDFEZHS5LGSQ64QL/
cvssv3.1 7.5 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YKJGV2EXVMYQW3OAJNI4WUTKKVMD2YYK/
ssvc Track https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YKJGV2EXVMYQW3OAJNI4WUTKKVMD2YYK/
cvssv3 7.5 https://nvd.nist.gov/vuln/detail/CVE-2022-32793
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2022-32793
cvssv3.1 7.5 https://support.apple.com/en-us/HT213340
ssvc Track https://support.apple.com/en-us/HT213340
cvssv3.1 7.5 https://support.apple.com/en-us/HT213342
ssvc Track https://support.apple.com/en-us/HT213342
cvssv3.1 7.5 https://support.apple.com/en-us/HT213345
ssvc Track https://support.apple.com/en-us/HT213345
cvssv3.1 7.5 https://support.apple.com/en-us/HT213346
ssvc Track https://support.apple.com/en-us/HT213346
cvssv3.1 7.5 https://support.apple.com/kb/HT213446
ssvc Track https://support.apple.com/kb/HT213446
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2022-32793
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7SETAAXEPGNBMYKTUDFEZHS5LGSQ64QL/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YKJGV2EXVMYQW3OAJNI4WUTKKVMD2YYK/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7SETAAXEPGNBMYKTUDFEZHS5LGSQ64QL/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YKJGV2EXVMYQW3OAJNI4WUTKKVMD2YYK/
https://support.apple.com/en-us/HT213340
https://support.apple.com/en-us/HT213342
https://support.apple.com/en-us/HT213345
https://support.apple.com/en-us/HT213346
https://support.apple.com/kb/HT213446
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
CVE-2022-32793 https://nvd.nist.gov/vuln/detail/CVE-2022-32793
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7SETAAXEPGNBMYKTUDFEZHS5LGSQ64QL/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-30T16:40:28Z/ Found at https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7SETAAXEPGNBMYKTUDFEZHS5LGSQ64QL/
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YKJGV2EXVMYQW3OAJNI4WUTKKVMD2YYK/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-30T16:40:28Z/ Found at https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YKJGV2EXVMYQW3OAJNI4WUTKKVMD2YYK/
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2022-32793
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2022-32793
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://support.apple.com/en-us/HT213340
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-30T16:40:28Z/ Found at https://support.apple.com/en-us/HT213340
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://support.apple.com/en-us/HT213342
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-30T16:40:28Z/ Found at https://support.apple.com/en-us/HT213342
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://support.apple.com/en-us/HT213345
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-30T16:40:28Z/ Found at https://support.apple.com/en-us/HT213345
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://support.apple.com/en-us/HT213346
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-30T16:40:28Z/ Found at https://support.apple.com/en-us/HT213346
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://support.apple.com/kb/HT213446
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-30T16:40:28Z/ Found at https://support.apple.com/kb/HT213446
Exploit Prediction Scoring System (EPSS)
Percentile 0.32103
EPSS Score 0.00149
Published At March 28, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
There are no relevant records.