CVE-2022-46689
90Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actcvss 7epss 45%
from disclosure to weapon2 days
Published on NVDDec 15
1st PoC+2d
metasploit+2d
VulnCheckDec 13
exploitation probability
45%top 1% of all CVEs
observed exploitation
yesVulnCheck
8 public exploit(s)
In short
A race condition in Apple's operating systems allows an app to execute code with kernel-level privileges, potentially giving it complete control over the device. This is a serious vulnerability because kernel privileges grant the deepest access possible to a system.
Technical detail
A race condition (CWE-362) in iOS, macOS, tvOS, watchOS, and iPadOS allows a local app to achieve arbitrary code execution with kernel privileges through a time-of-check to time-of-use (TOCTOU) vulnerability. Exploitation requires the attacker to run code on the target device; successful exploitation results in complete system compromise.
Summary generated and translated by AI from the official description.
A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges.
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
public PoCs found — 8
vulncheckvulncheck.com/xdb/3c5cc09f7026unverifiedvulncheckvulncheck.com/xdb/60e734e24d20unverifiedvulncheckvulncheck.com/xdb/99d09bb4028bunverifiedvulncheckvulncheck.com/xdb/757c1e14dceeunverifiedvulncheckvulncheck.com/xdb/4036316193a0unverifiedvulncheckvulncheck.com/xdb/edba18e25b89unverifiedvulncheckvulncheck.com/xdb/a92229722c63unverifiedvulncheckvulncheck.com/xdb/9eed3d39e805unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://seclists.org/fulldisclosure/2022/Dec/20http://seclists.org/fulldisclosure/2022/Dec/21http://seclists.org/fulldisclosure/2022/Dec/23http://seclists.org/fulldisclosure/2022/Dec/24http://seclists.org/fulldisclosure/2022/Dec/25http://seclists.org/fulldisclosure/2022/Dec/26http://seclists.org/fulldisclosure/2022/Dec/27https://support.apple.com/en-us/HT213530https://support.apple.com/en-us/HT213531https://support.apple.com/en-us/HT213532https://support.apple.com/en-us/HT213533https://support.apple.com/en-us/HT213534