CVE-2022-32827
published 2022-11-01CVE-2022-32827: A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to cause a…
PriorityP418medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.48%
39.1th percentile
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to cause a denial-of-service.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios | — | — |
| apple | iphone_os | < 16.0 | 16.0 |
| apple | macos | < 13.0 | 13.0 |
| apple | macos | >= unspecified < 13 | 13 |
| apple | macos | >= unspecified < 16 | 16 |
| apple | macos_ventura | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
vendor_oracle9.6MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2022-32827: macOS Ventura 13
vendor_apple·2022-10-24·CVSS 5.5
CVE-2022-32827 [MEDIUM] CVE-2022-32827: macOS Ventura 13
Apple Security Update: About the security content of macOS Ventura 13
Product: macOS Ventura
Version: 13
CVE: CVE-2022-32827
Component: AppleAVD
Impact: An app may be able to cause a denial-of-service
Description: A memory corruption issue was addressed with improved state management.
Apple
CVE-2022-32827: iOS 16
vendor_apple·2022-09-12·CVSS 5.5
CVE-2022-32827 [MEDIUM] CVE-2022-32827: iOS 16
Apple Security Update: About the security content of iOS 16
Product: iOS
Version: 16
CVE: CVE-2022-32827
Component: AppleAVD
Impact: An app may be able to cause a denial-of-service
Description: A memory corruption issue was addressed with improved state management.
Oracle
Oracle Oracle Communications Risk Matrix: Policy (MockServer) — CVE-2021-32827
vendor_oracle·2022-01-15·CVSS 9.6
CVE-2021-32827 [MEDIUM] Oracle Oracle Communications Risk Matrix: Policy (MockServer) — CVE-2021-32827
Oracle Oracle Communications Risk Matrix: Policy (MockServer) vulnerability
CVE: CVE-2021-32827
CVSS: 9.6
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpujan2022 (JAN 2022)
GHSA
GHSA-v4qp-vm8g-fvqc: A memory corruption issue was addressed with improved state management
ghsa_unreviewed·2022-11-02
CVE-2022-32827 [MEDIUM] CWE-787 GHSA-v4qp-vm8g-fvqc: A memory corruption issue was addressed with improved state management
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to cause a denial-of-service.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://packetstormsecurity.com/files/169929/AppleAVD-deallocateKernelMemoryInternal-Missing-Surface-Lock.htmlhttps://support.apple.com/en-us/HT213446https://support.apple.com/en-us/HT213488http://packetstormsecurity.com/files/169929/AppleAVD-deallocateKernelMemoryInternal-Missing-Surface-Lock.htmlhttps://support.apple.com/en-us/HT213446https://support.apple.com/en-us/HT213488
2022-11-01
Published