CVE-2022-32781

This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5, Security Update 2022-005 Catalina, macOS Big Sur 11.6.8. An app with root privileges may be able to access private information.

• CWE-269

• https://support.apple.com/en-us/HT213257Vendor Advisory
• https://support.apple.com/en-us/HT213258Vendor Advisory
• https://support.apple.com/en-us/HT213343Vendor Advisory
• https://support.apple.com/en-us/HT213344Vendor Advisory
• https://support.apple.com/en-us/HT213257Vendor Advisory
• https://support.apple.com/en-us/HT213258Vendor Advisory
• https://support.apple.com/en-us/HT213343Vendor Advisory
• https://support.apple.com/en-us/HT213344Vendor Advisory

Published

Sep 23, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-32775An integer overflow vulnerability exists in the web interfac…8.8
• CVE-2022-32776Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabili…4.8
• CVE-2022-32777An information disclosure vulnerability exists in the cookie…7.5
• CVE-2022-32778An information disclosure vulnerability exists in the cookie…7.5
• CVE-2022-32779Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-3278NULL Pointer Dereference in GitHub repository vim/vim prior …5.5
• CVE-2022-32782This issue was addressed by enabling hardened runtime. This …4.4
• CVE-2022-32783A logic issue was addressed with improved checks. This issue…5.5
• CVE-2022-32784The issue was addressed with improved UI handling. This issu…6.5
• CVE-2022-32785A null pointer dereference was addressed with improved valid…5.5
• CVE-2022-32786An issue in the handling of environment variables was addres…5.5
• CVE-2022-32787An out-of-bounds write issue was addressed with improved bou…8.8