CVE-2022-46701

HIGH

iOS <16.2- iPadOS <16.2 - macOS <Ventura 13.1 - tvOS <16.2 - RCE

Title source: llm
STIX 2.1

Description

The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2. Connecting to a malicious NFS server may lead to arbitrary code execution with kernel privileges.

References (6)

Core 6
Core References
Third Party Advisory mailing-list
http://seclists.org/fulldisclosure/2022/Dec/20
Third Party Advisory mailing-list
http://seclists.org/fulldisclosure/2022/Dec/23
Third Party Advisory mailing-list
http://seclists.org/fulldisclosure/2022/Dec/26

Scores

CVSS v3 7.8
EPSS 0.0011
EPSS Percentile 29.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-20
Status published
Products (4)
apple/ipados 16.0 - 16.2
apple/iphone_os 16.0 - 16.2
apple/macos 13.0 - 13.1
apple/tvos < 16.2
Published Dec 15, 2022
Tracked Since Feb 18, 2026