Severity
Medium
Analysis Summary
CVE-2022-32857 CVSS:4.3
Apple macOS Catalina and Monterey could allow a remote authenticated attacker to obtain sensitive information, caused by a flaw in the Software Update. By sniffing the network traffic, an attacker could exploit this vulnerability to track a user’s activity.
CVE-2022-32853 CVSS:7.1
Apple macOS Catalina and Monterey is vulnerable to a denial of service, caused by an out-of-bounds read issue in AppleScript. By using a specially-crafted AppleScript binary, a local attacker could exploit this vulnerability to cause unexpected termination or disclosure of process memory.
Impact
- Information Disclosure
- Denial of Service
Indicators Of Compromise
CVE
- CVE-2022-32857
- CVE-2022-32853
Affected Vendors
Apple
Affected Products
Apple macOS Catalina
Apple macOS Monterey 12.4
Apple tvOS 15.5
Remediation
Refer to Apple security Advisory for patch, upgrade or suggested workaround information.
Apple macOS Catalina
Apple macOS Monterey 12.5
Apple tvOS 15.6