7.8

CVE-2022-42801

A logic issue was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1. An app may be able to execute arbitrary code with kernel privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iPadOS Version < 5.7.1
Apple ≫ iPhone OS Version < 5.7.1
Apple ≫ macOS Version >= 12.0 < 12.6.1
Apple ≫ tvOS Version < 16.1
Apple ≫ watchOS Version < 9.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.51% 0.392
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-693 Protection Mechanism Failure

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

https://support.apple.com/en-us/HT213488
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT213494
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT213489
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT213490
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT213491
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT213492
Vendor Advisory
Release Notes
http://packetstormsecurity.com/files/170011/XNU-vm_object-Use-After-Free.html
Third Party Advisory
VDB Entry