CVE-2022-32913

LOW

iPhone OS < 16.0, macOS 11.0-11.7, tvOS < 16.0, watchOS < 9.0 - Unauthorized App State Exposure via Camera

Title source: llm
STIX 2.1

Description

The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, watchOS 9, macOS Monterey 12.6, tvOS 16. A sandboxed app may be able to determine which app is currently using the camera.

References (6)

Core 6

Scores

CVSS v3 3.3
EPSS 0.0011
EPSS Percentile 29.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-200
Status published
Products (4)
apple/iphone_os < 16.0
apple/macos 11.0 - 11.7
apple/tvos < 16.0
apple/watchos < 9.0
Published Nov 01, 2022
Tracked Since Feb 18, 2026