Apple Ios 15.4 And Ipados vulnerabilities

CVE-2022-22667 [HIGH] CVE-2022-22667: iOS 15.4 and iPadOS 15.4 Apple Security Update: About the security content of iOS 15.4 and iPadOS 15.4 Product: iOS 15.4 and iPadOS Version: 15.4 CVE: CVE-2022-22667 Component: GPU Drivers Impact: An application may be able to execute arbitrary code with kernel privileges Description: A use after free issue was addressed with improved memory management.

CVE-2022-22672 [HIGH] CVE-2022-22672: iOS 15.4 and iPadOS 15.4 Apple Security Update: About the security content of iOS 15.4 and iPadOS 15.4 Product: iOS 15.4 and iPadOS Version: 15.4 CVE: CVE-2022-22672 Component: MobileAccessoryUpdater Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved memory handling.

CVE-2022-22612 [HIGH] CVE-2022-22612: iOS 15.4 and iPadOS 15.4 Apple Security Update: About the security content of iOS 15.4 and iPadOS 15.4 Product: iOS 15.4 and iPadOS Version: 15.4 CVE: CVE-2022-22612 Component: ImageIO Impact: Processing a maliciously crafted image may lead to heap corruption Description: A memory consumption issue was addressed with improved memory handling.

CVE-2022-22609 [HIGH] CVE-2022-22609: iOS 15.4 and iPadOS 15.4 Apple Security Update: About the security content of iOS 15.4 and iPadOS 15.4 Product: iOS 15.4 and iPadOS Version: 15.4 CVE: CVE-2022-22609 Component: Preferences Impact: A malicious application may be able to read other applications' settings Description: The issue was addressed with additional permissions checks.

CVE-2022-22643 [HIGH] CVE-2022-22643: iOS 15.4 and iPadOS 15.4 Apple Security Update: About the security content of iOS 15.4 and iPadOS 15.4 Product: iOS 15.4 and iPadOS Version: 15.4 CVE: CVE-2022-22643 Component: FaceTime Impact: A user may send audio and video in a FaceTime call without knowing that they have done so Description: This issue was addressed with improved checks.

CVE-2022-22653 [HIGH] CVE-2022-22653: iOS 15.4 and iPadOS 15.4 Apple Security Update: About the security content of iOS 15.4 and iPadOS 15.4 Product: iOS 15.4 and iPadOS Version: 15.4 CVE: CVE-2022-22653 Component: IOGPUFamily Impact: An application may be able to gain elevated privileges Description: A use after free issue was addressed with improved memory management.

CVE-2022-22618 [HIGH] CVE-2022-22618: iOS 15.4 and iPadOS 15.4 Apple Security Update: About the security content of iOS 15.4 and iPadOS 15.4 Product: iOS 15.4 and iPadOS Version: 15.4 CVE: CVE-2022-22618 Component: Phone Impact: A user may be able to bypass the Emergency SOS passcode prompt Description: This issue was addressed with improved checks.

CVE-2022-21658 [HIGH] CVE-2022-21658: iOS 15.4 and iPadOS 15.4 Apple Security Update: About the security content of iOS 15.4 and iPadOS 15.4 Product: iOS 15.4 and iPadOS Version: 15.4 CVE: CVE-2022-21658 Component: LLVM Impact: An application may be able to delete files for which it does not have permission Description: A race condition was addressed with additional validation.

CVE-2022-22638 [MEDIUM] CVE-2022-22638: iOS 15.4 and iPadOS 15.4 Apple Security Update: About the security content of iOS 15.4 and iPadOS 15.4 Product: iOS 15.4 and iPadOS Version: 15.4 CVE: CVE-2022-22638 Component: Kernel Impact: An attacker in a privileged position may be able to perform a denial of service attack Description: A null pointer dereference was addressed with improved validation.

CVE-2022-22662 [MEDIUM] CVE-2022-22662: iOS 15.4 and iPadOS 15.4 Apple Security Update: About the security content of iOS 15.4 and iPadOS 15.4 Product: iOS 15.4 and iPadOS Version: 15.4 CVE: CVE-2022-22662 Component: WebKit Impact: Processing maliciously crafted web content may disclose sensitive user information Description: A cookie management issue was addressed with improved state management.

CVE-2022-22659 [MEDIUM] CVE-2022-22659: iOS 15.4 and iPadOS 15.4 Apple Security Update: About the security content of iOS 15.4 and iPadOS 15.4 Product: iOS 15.4 and iPadOS Version: 15.4 CVE: CVE-2022-22659 Component: NetworkExtension Impact: An attacker in a privileged network position may be able to leak sensitive user information Description: A logic issue was addressed with improved state management.

CVE-2021-36976 [MEDIUM] CVE-2021-36976: iOS 15.4 and iPadOS 15.4 Apple Security Update: About the security content of iOS 15.4 and iPadOS 15.4 Product: iOS 15.4 and iPadOS Version: 15.4 CVE: CVE-2021-36976 Component: CVE-2021-36976

CVE-2022-22652 [MEDIUM] CVE-2022-22652: iOS 15.4 and iPadOS 15.4 Apple Security Update: About the security content of iOS 15.4 and iPadOS 15.4 Product: iOS 15.4 and iPadOS Version: 15.4 CVE: CVE-2022-22652 Component: Cellular Impact: A person with physical access may be able to view and modify the carrier account information and settings from the lock screen Description: The GSMA authentication panel could be presented on the lock screen. The issue was resolved by requiring device unlock to inte

CVE-2022-22600 [MEDIUM] CVE-2022-22600: iOS 15.4 and iPadOS 15.4 Apple Security Update: About the security content of iOS 15.4 and iPadOS 15.4 Product: iOS 15.4 and iPadOS Version: 15.4 CVE: CVE-2022-22600 Component: Sandbox Impact: A malicious application may be able to bypass certain Privacy preferences Description: The issue was addressed with improved permissions logic.

CVE-2021-30946 [MEDIUM] CVE-2021-30946: iOS 15.4 and iPadOS 15.4 Apple Security Update: About the security content of iOS 15.4 and iPadOS 15.4 Product: iOS 15.4 and iPadOS Version: 15.4 CVE: CVE-2021-30946 Component: LaunchServices Impact: An app may be able to bypass certain Privacy preferences Description: A logic issue was addressed with improved restrictions.

CVE-2022-22663 [MEDIUM] CVE-2022-22663: iOS 15.4 and iPadOS 15.4 Apple Security Update: About the security content of iOS 15.4 and iPadOS 15.4 Product: iOS 15.4 and iPadOS Version: 15.4 CVE: CVE-2022-22663 Component: CoreTypes Impact: A malicious application may bypass Gatekeeper checks Description: This issue was addressed with improved checks to prevent unauthorized actions.

CVE-2022-22655 [MEDIUM] CVE-2022-22655: iOS 15.4 and iPadOS 15.4 Apple Security Update: About the security content of iOS 15.4 and iPadOS 15.4 Product: iOS 15.4 and iPadOS Version: 15.4 CVE: CVE-2022-22655 Component: Sandbox Impact: An app may be able to leak sensitive user information Description: An access issue was addressed with improvements to the sandbox.

CVE-2022-22668 [MEDIUM] CVE-2022-22668: iOS 15.4 and iPadOS 15.4 Apple Security Update: About the security content of iOS 15.4 and iPadOS 15.4 Product: iOS 15.4 and iPadOS Version: 15.4 CVE: CVE-2022-22668 Component: Wi-Fi Impact: A malicious application may be able to leak sensitive user information Description: A logic issue was addressed with improved restrictions.

CVE-2022-22621 [MEDIUM] CVE-2022-22621: iOS 15.4 and iPadOS 15.4 Apple Security Update: About the security content of iOS 15.4 and iPadOS 15.4 Product: iOS 15.4 and iPadOS Version: 15.4 CVE: CVE-2022-22621 Component: UIKit Impact: A person with physical access to an iOS device may be able to see sensitive information via keyboard suggestions Description: This issue was addressed with improved checks.

CVE-2022-22671 [MEDIUM] CVE-2022-22671: iOS 15.4 and iPadOS 15.4 Apple Security Update: About the security content of iOS 15.4 and iPadOS 15.4 Product: iOS 15.4 and iPadOS Version: 15.4 CVE: CVE-2022-22671 Component: VoiceOver Impact: A person with physical access to an iOS device may be able to access photos from the lock screen Description: An authentication issue was addressed with improved state management.