VulnerabilityModified
CVE-2022-32875
A logic issue was addressed with improved state management.
MEDIUM 5.0EPSS 0.27%
Does this matter?
Lower severity and a low EPSS score (0.27%). Track it; it rarely justifies an emergency change on its own.
Description
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, watchOS 9, macOS Monterey 12.6. An app may be able to read sensitive location information.
- CVSS 3.1
- 5.0 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
- EPSS
- 0.27% probability · 18th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- apple/iphone os · apple/macos · apple/watchos
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/HT213443Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213444Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213446Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213486Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213488Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213443Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213444Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213446Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213486Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213488Release Notes, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.