Medium · 5.5 CVE-2022-42862 EUVD-2022-45925GHSA-m5c8-qvmj-6h85

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. An app may b…

Published Dec 15, 2022 · Updated Apr 21, 2025 · Assigned by apple

Vendor: Apple Product: macOS Platform: macOS

Description

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. An app may be able to bypass Privacy preferences.

Affected products

Vendor	Product	Affected	Fixed
Apple	macOS	unspecified – < 13.1, unspecified – < 16.2	13.1

Advisories 2

WID-SEC-2022-2321 Apple iOS: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Jul 3, 2024
WID-SEC-2022-2313 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 31, 2024

References

https://support.apple.com/en-us/HT213532
https://support.apple.com/en-us/HT213530
20221220 APPLE-SA-2022-12-13-1 iOS 16.2 and iPadOS 16.2 mailing-list
20221220 APPLE-SA-2022-12-13-4 macOS Ventura 13.1 mailing-list

EUVD	v3.1	5.5
CISA-ADP	v3.1	5.5