cve/2022/CVE-2022-32879.md

24 lines
1.2 KiB
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2022-32879](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32879)
![](https://img.shields.io/static/v1?label=Product&message=macOS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=watchOS&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%2013%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3C%2015.7%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3C%2016%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3C%209%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=A%20user%20with%20physical%20access%20to%20a%20device%20may%20be%20able%20to%20access%20contacts%20from%20the%20lock%20screen&color=brighgreen)
### Description
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, watchOS 9, tvOS 16. A user with physical access to a device may be able to access contacts from the lock screen.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/diego-acc/NVD-Scratching
- https://github.com/diegosanzmartin/NVD-Scratching