CVE-2022-42801

HIGH

iPadOS < 15.7.1 - Arbitrary Code Execution with Kernel Privileges

Title source: llm
STIX 2.1

Description

A logic issue was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1. An app may be able to execute arbitrary code with kernel privileges.

References (7)

Core 7
Core References
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213488
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213489
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213490
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213491
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213492
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213494

Scores

CVSS v3 7.8
EPSS 0.0024
EPSS Percentile 47.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-693
Status published
Products (5)
apple/ipados < 5.7.1
apple/iphone_os < 5.7.1
apple/macos 12.0 - 12.6.1
apple/tvos < 16.1
apple/watchos < 9.1
Published Nov 01, 2022
Tracked Since Feb 18, 2026