CVE-2022-42848

Опубликовано: 15 дек. 2022

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, iOS 15.7.2 and iPadOS 15.7.2, tvOS 16.2. An app may be able to execute arbitrary code with kernel privileges.

Ссылки

http://seclists.org/fulldisclosure/2022/Dec/20
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2022/Dec/21
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2022/Dec/26
Mailing List
Third Party Advisory
https://support.apple.com/en-us/HT213530
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT213531
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT213535
Release Notes
Vendor Advisory
http://seclists.org/fulldisclosure/2022/Dec/20
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2022/Dec/21
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2022/Dec/26
Mailing List
Third Party Advisory
https://support.apple.com/en-us/HT213530
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT213531
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT213535
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 15.7.2 (исключая)

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия от 16.0 (включая) до 16.2 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 15.7.2 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия от 16.0 (включая) до 16.2 (исключая)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Версия до 16.2 (исключая)

EPSS

Процентиль: 53%

0.00296

Низкий

7.8 High

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-693

Связанные уязвимости

GHSA-mv7w-74c6-4w37