CVE-2022-32811

HIGH Year: 2022
CVSS v3 Score
7.8
High
Weakness Type
CWE-667
View all →

Vulnerability Description

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina. An app may be able to execute arbitrary code with kernel privileges.

Related Vulnerabilities

CVE-2002-0051

HIGH
CVSS:7.8(High)

Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access.

CWE-6672002

CVE-2010-4210

HIGH
CVSS:7.8(High)

The pfs_getextattr function in FreeBSD 7.x before 7.3-RELEASE and 8.x before 8.0-RC1 unlocks a mutex that was not previously locked, which allows local users to cause a denial of service (kernel panic...

CWE-6672010

CVE-2018-9344

HIGH
CVSS:7.8(High)

In several functions of DescramblerImpl.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed...

CWE-6672018

CVE-2019-8829

HIGH
CVSS:7.8(High)

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6.1, tvOS 13.2, iO...

CWE-6672019

CVE-2020-0420

HIGH
CVSS:7.8(High)

In setUpdatableDriverPath of GpuService.cpp, there is a possible memory corruption due to a missing permission check. This could lead to local escalation of privilege with no additional execution priv...

CWE-6672020

CVE-2020-11284

HIGH
CVSS:7.8(High)

Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region untrusted source of input for secure boot loader in Snapdragon Auto,...

CWE-6672020