CVE-2022-32918
published 2022-11-01CVE-2022-32918: This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to bypass Privacy preferences.
PriorityP421medium5.5CVSS 3.1
AVLACLPRNUIRSUCNIHAN
EPSS
0.21%
11.7th percentile
This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to bypass Privacy preferences.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios | — | — |
| apple | iphone_os | < 16.0 | 16.0 |
| apple | macos | < 13.0 | 13.0 |
| apple | macos | >= unspecified < 13 | 13 |
| apple | macos | >= unspecified < 16 | 16 |
| apple | macos_ventura | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Apple iOS up to 15.x Privacy Preferences access control (EUVD-2022-35984)
vuldb·2026-06-06·CVSS 5.5
CVE-2022-32918 [MEDIUM] Apple iOS up to 15.x Privacy Preferences access control (EUVD-2022-35984)
A vulnerability has been found in Apple iOS up to 15.x and classified as critical. Impacted is an unknown function of the component Privacy Preferences. The manipulation leads to improper access controls.
This vulnerability is traded as CVE-2022-32918. An attack has to be approached locally. There is no exploit available.
The affected component should be upgraded.
VulDB
Apple macOS Photos access control (HT213488 / EUVD-2022-35984)
vuldb·2026-06-06·CVSS 5.5
CVE-2022-32918 [MEDIUM] Apple macOS Photos access control (HT213488 / EUVD-2022-35984)
A vulnerability was found in Apple macOS. It has been declared as problematic. Affected is an unknown function of the component Photos. Executing a manipulation can lead to improper access controls.
The identification of this vulnerability is CVE-2022-32918. The attack can only be executed locally. There is no exploit available.
It is recommended to upgrade the affected component.
GHSA
GHSA-j9r9-pw35-cqq2: This issue was addressed with improved data protection
ghsa_unreviewed·2022-11-02
CVE-2022-32918 [MEDIUM] CWE-284 GHSA-j9r9-pw35-cqq2: This issue was addressed with improved data protection
This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to bypass Privacy preferences.
Apple
CVE-2022-32918: macOS Ventura 13
vendor_apple·2022-10-24·CVSS 5.5
CVE-2022-32918 [MEDIUM] CVE-2022-32918: macOS Ventura 13
Apple Security Update: About the security content of macOS Ventura 13
Product: macOS Ventura
Version: 13
CVE: CVE-2022-32918
Component: Photos
Impact: An app may be able to bypass Privacy preferences
Description: This issue was addressed with improved data protection.
Apple
CVE-2022-32918: iOS 16
vendor_apple·2022-09-12·CVSS 5.5
CVE-2022-32918 [MEDIUM] CVE-2022-32918: iOS 16
Apple Security Update: About the security content of iOS 16
Product: iOS
Version: 16
CVE: CVE-2022-32918
Component: Photos
Impact: An app may be able to bypass Privacy preferences
Description: This issue was addressed with improved data protection.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-11-01
Published