CVE-2022-32918 — Improper Access Control in Apple Macos

Vendor	Product	Version range	Fixed in
apple	ios	—	—
apple	iphone_os	< 16.0	16.0
apple	macos	< 13.0	13.0
apple	macos	>= unspecified < 13	13
apple	macos	>= unspecified < 16	16
apple	macos_ventura	—	—

VulDB

Apple iOS up to 15.x Privacy Preferences access control (EUVD-2022-35984)

vuldb·2026-06-06·CVSS 5.5

CVE-2022-32918 [MEDIUM] Apple iOS up to 15.x Privacy Preferences access control (EUVD-2022-35984) A vulnerability has been found in Apple iOS up to 15.x and classified as critical. Impacted is an unknown function of the component Privacy Preferences. The manipulation leads to improper access controls. This vulnerability is traded as CVE-2022-32918. An attack has to be approached locally. There is no exploit available. The affected component should be upgraded.

VulDB

Apple macOS Photos access control (HT213488 / EUVD-2022-35984)

vuldb·2026-06-06·CVSS 5.5

CVE-2022-32918 [MEDIUM] Apple macOS Photos access control (HT213488 / EUVD-2022-35984) A vulnerability was found in Apple macOS. It has been declared as problematic. Affected is an unknown function of the component Photos. Executing a manipulation can lead to improper access controls. The identification of this vulnerability is CVE-2022-32918. The attack can only be executed locally. There is no exploit available. It is recommended to upgrade the affected component.

GHSA

GHSA-j9r9-pw35-cqq2: This issue was addressed with improved data protection

ghsa_unreviewed·2022-11-02

CVE-2022-32918 [MEDIUM] CWE-284 GHSA-j9r9-pw35-cqq2: This issue was addressed with improved data protection This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to bypass Privacy preferences.

Apple

CVE-2022-32918: macOS Ventura 13

vendor_apple·2022-10-24·CVSS 5.5

CVE-2022-32918 [MEDIUM] CVE-2022-32918: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-32918 Component: Photos Impact: An app may be able to bypass Privacy preferences Description: This issue was addressed with improved data protection.

Apple

CVE-2022-32918: iOS 16

vendor_apple·2022-09-12·CVSS 5.5

CVE-2022-32918 [MEDIUM] CVE-2022-32918: iOS 16 Apple Security Update: About the security content of iOS 16 Product: iOS Version: 16 CVE: CVE-2022-32918 Component: Photos Impact: An app may be able to bypass Privacy preferences Description: This issue was addressed with improved data protection.

CVE-2022-32918: This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to bypass Privacy preferences.

Affected