CVE-2022-42864

HIGH EXPLOITED

Apple Ipados < 15.7.2 - Race Condition

Title source: rule

Description

A race condition was addressed with improved state handling. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges.

Exploits (1)

nomisec WORKING POC 66 stars

by Muirey03 · dos

https://github.com/Muirey03/CVE-2022-42864

View Code ZIP pw:eip

References (14)

[Mailing List, Third Party Advisory] http://seclists.org/fulldisclosure/2022/Dec/20

[Mailing List, Third Party Advisory] http://seclists.org/fulldisclosure/2022/Dec/21

[Mailing List, Third Party Advisory] http://seclists.org/fulldisclosure/2022/Dec/23

[Mailing List, Third Party Advisory] http://seclists.org/fulldisclosure/2022/Dec/24

[Mailing List, Third Party Advisory] http://seclists.org/fulldisclosure/2022/Dec/25

[Mailing List, Third Party Advisory] http://seclists.org/fulldisclosure/2022/Dec/26

[Mailing List, Third Party Advisory] http://seclists.org/fulldisclosure/2022/Dec/27

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/HT213530

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/HT213531

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/HT213532

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/HT213533

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/HT213534

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/HT213535

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/HT213536

Scores

CVSS v3 7.0

EPSS 0.0403

EPSS Percentile 88.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2022-12-13

CWE

CWE-362

Status published

Products (6)

apple/ipados < 15.7.2

apple/iphone_os < 15.7.2

apple/macos 13.0

apple/macos < 11.7.2

apple/tvos < 16.2

apple/watchos < 9.2

Published Dec 15, 2022

Tracked Since Feb 18, 2026