| CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
|---|---|---|
| 3.2 | $0-$5k | 0.00 |
Summary
A vulnerability classified as problematic has been found in Apple macOS. This vulnerability affects unknown code of the component libxml2. This manipulation causes initialization. The identification of this vulnerability is CVE-2022-32823. The attack can only be executed locally. There is no exploit available. It is recommended to upgrade the affected component.
Details
A vulnerability has been found in Apple macOS (Operating System) (version now known) and classified as problematic. Affected by this vulnerability is some unknown processing of the component libxml2. The manipulation with an unknown input leads to a initialization vulnerability. The CWE definition for the vulnerability is CWE-665. The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used. As an impact it is known to affect confidentiality.
The weakness was shared 07/20/2022 as HT213345 as confirmed advisory (Website). The advisory is shared at support.apple.com. This vulnerability is known as CVE-2022-32823. Neither technical details nor an exploit are publicly available. The advisory points out:
An app may be able to leak sensitive user information
Upgrading eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability. The advisory contains the following remark:
A memory initialization issue was addressed with improved memory handling.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Product
Type
Vendor
Name
License
Website
- Vendor: https://www.apple.com/
CPE 2.3
CPE 2.2
CVSSv4
VulDB Vector: 🔍VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 3.3VulDB Meta Temp Score: 3.2
VulDB Base Score: 3.3
VulDB Temp Score: 3.2
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
Exploiting
Class: InitializationCWE: CWE-665
CAPEC: 🔍
ATT&CK: 🔍
Physical: Partially
Local: Yes
Remote: No
Availability: 🔍
Status: Not defined
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
| 0-Day | Unlock | Unlock | Unlock | Unlock |
|---|---|---|---|---|
| Today | Unlock | Unlock | Unlock | Unlock |
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
Reaction Time: 🔍
0-Day Time: 🔍
Exposure Time: 🔍
Timeline
06/09/2022 🔍07/20/2022 🔍
07/20/2022 🔍
07/22/2022 🔍
08/20/2022 🔍
Sources
Vendor: apple.comAdvisory: HT213345
Status: Confirmed
CVE: CVE-2022-32823 (🔍)
GCVE (CVE): GCVE-0-2022-32823
GCVE (VulDB): GCVE-100-204889
scip Labs: https://www.scip.ch/en/?labs.20180712
Entry
Created: 07/22/2022 12:03Updated: 08/20/2022 09:35
Changes: 07/22/2022 12:03 (16), 07/22/2022 12:06 (28), 08/20/2022 09:35 (1)
Complete: 🔍
Cache ID: 216::103
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
No comments yet. Languages: en.
Please log in to comment.