CVE-2022-32893: high-severity vulnerability in Apple macOS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Apply updates per vendor instructions.
A flaw in how Apple products process web content allows attackers to write data outside intended memory boundaries, potentially running malicious code on your device. This vulnerability is being actively exploited in the wild.
Out-of-bounds write vulnerability in web content processing affecting iOS, iPadOS, macOS, and Safari. The attack vector is remote via maliciously crafted web content; no user interaction beyond visiting a compromised page is required. Successful exploitation results in arbitrary code execution with the privileges of the affected application.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.