CVE-2022-42801

Sažetak

A logic issue was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1. An app may be able to execute arbitrary code with kernel privileges.

Reference

http://packetstormsecurity.com/files/170011/XNU-vm_object-Use-After-Free.html
https://support.apple.com/en-us/HT213488
https://support.apple.com/en-us/HT213489
https://support.apple.com/en-us/HT213490
https://support.apple.com/en-us/HT213491
https://support.apple.com/en-us/HT213492
https://support.apple.com/en-us/HT213494
http://packetstormsecurity.com/files/170011/XNU-vm_object-Use-After-Free.html
https://support.apple.com/en-us/HT213488
https://support.apple.com/en-us/HT213489
https://support.apple.com/en-us/HT213490
https://support.apple.com/en-us/HT213491
https://support.apple.com/en-us/HT213492
https://support.apple.com/en-us/HT213494

CVSS

Base:	7.8
Impact:	5.9
Exploitability:	1.8

Pristup

Vektor	Složenost	Autentikacija
LOCAL	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
HIGH	HIGH	HIGH

CVSS vektor

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Zadnje važnije ažuriranje

22-04-2025 - 15:16

Objavljeno

01-11-2022 - 20:15