{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "tvOS versions ant\u00e9rieures \u00e0 16.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iPadOS versions ant\u00e9rieures \u00e0 16.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "watchOS versions ant\u00e9rieures \u00e0 9.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iOS versions 15.x ant\u00e9rieures \u00e0 15.7.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iPadOS versions ant\u00e9rieures \u00e0 15.7.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Big Sur versions 11.x ant\u00e9rieures \u00e0 11.7.2",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Ventura versions 13.x ant\u00e9rieures \u00e0 13.1",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Monterey versions 12.x ant\u00e9rieures \u00e0 12.6.2",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "Safari versions ant\u00e9rieures \u00e0 16.2",
      "product": {
        "name": "Safari",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iOS versions 16.x ant\u00e9rieures \u00e0 16.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iCloud pour Windows versions ant\u00e9rieures \u00e0 14.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2022-46698",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46698"
    },
    {
      "name": "CVE-2022-42865",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42865"
    },
    {
      "name": "CVE-2022-42861",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42861"
    },
    {
      "name": "CVE-2022-42821",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42821"
    },
    {
      "name": "CVE-2022-42852",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42852"
    },
    {
      "name": "CVE-2022-46699",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46699"
    },
    {
      "name": "CVE-2022-42864",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42864"
    },
    {
      "name": "CVE-2022-32943",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-32943"
    },
    {
      "name": "CVE-2022-42867",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42867"
    },
    {
      "name": "CVE-2022-42866",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42866"
    },
    {
      "name": "CVE-2022-42850",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42850"
    },
    {
      "name": "CVE-2022-46696",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46696"
    },
    {
      "name": "CVE-2022-42848",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42848"
    },
    {
      "name": "CVE-2022-42855",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42855"
    },
    {
      "name": "CVE-2022-46701",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46701"
    },
    {
      "name": "CVE-2022-42863",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42863"
    },
    {
      "name": "CVE-2022-42837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42837"
    },
    {
      "name": "CVE-2022-46689",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46689"
    },
    {
      "name": "CVE-2022-46691",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46691"
    },
    {
      "name": "CVE-2022-42859",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42859"
    },
    {
      "name": "CVE-2022-42856",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42856"
    },
    {
      "name": "CVE-2022-42844",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42844"
    },
    {
      "name": "CVE-2022-40303",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40303"
    },
    {
      "name": "CVE-2022-42840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42840"
    },
    {
      "name": "CVE-2022-42849",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42849"
    },
    {
      "name": "CVE-2022-46694",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46694"
    },
    {
      "name": "CVE-2022-42862",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42862"
    },
    {
      "name": "CVE-2022-46690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46690"
    },
    {
      "name": "CVE-2022-24836",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24836"
    },
    {
      "name": "CVE-2022-42841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42841"
    },
    {
      "name": "CVE-2022-42842",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42842"
    },
    {
      "name": "CVE-2022-42851",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42851"
    },
    {
      "name": "CVE-2022-42845",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42845"
    },
    {
      "name": "CVE-2022-42843",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42843"
    },
    {
      "name": "CVE-2022-46700",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46700"
    },
    {
      "name": "CVE-2022-42846",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42846"
    },
    {
      "name": "CVE-2022-32942",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-32942"
    },
    {
      "name": "CVE-2022-46702",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46702"
    },
    {
      "name": "CVE-2022-42847",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42847"
    },
    {
      "name": "CVE-2022-46695",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46695"
    },
    {
      "name": "CVE-2022-29181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29181"
    },
    {
      "name": "CVE-2022-46692",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46692"
    },
    {
      "name": "CVE-2022-42854",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42854"
    },
    {
      "name": "CVE-2022-40304",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40304"
    },
    {
      "name": "CVE-2022-46697",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46697"
    },
    {
      "name": "CVE-2022-42853",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42853"
    },
    {
      "name": "CVE-2022-46693",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46693"
    }
  ],
  "links": [],
  "reference": "CERTFR-2022-AVI-1108",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-12-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un contournement de la\npolitique de s\u00e9curit\u00e9 et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple du 13 d\u00e9cembre 2022",
      "url": "https://support.apple.com/en-us/HT213516"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "tvOS versions ant\u00e9rieures \u00e0 16.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iPadOS versions ant\u00e9rieures \u00e0 16.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "watchOS versions ant\u00e9rieures \u00e0 9.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iOS versions 15.x ant\u00e9rieures \u00e0 15.7.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iPadOS versions ant\u00e9rieures \u00e0 15.7.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Big Sur versions 11.x ant\u00e9rieures \u00e0 11.7.2",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Ventura versions 13.x ant\u00e9rieures \u00e0 13.1",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Monterey versions 12.x ant\u00e9rieures \u00e0 12.6.2",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "Safari versions ant\u00e9rieures \u00e0 16.2",
      "product": {
        "name": "Safari",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iOS versions 16.x ant\u00e9rieures \u00e0 16.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iCloud pour Windows versions ant\u00e9rieures \u00e0 14.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2022-46698",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46698"
    },
    {
      "name": "CVE-2022-42865",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42865"
    },
    {
      "name": "CVE-2022-42861",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42861"
    },
    {
      "name": "CVE-2022-42821",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42821"
    },
    {
      "name": "CVE-2022-42852",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42852"
    },
    {
      "name": "CVE-2022-46699",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46699"
    },
    {
      "name": "CVE-2022-42864",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42864"
    },
    {
      "name": "CVE-2022-32943",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-32943"
    },
    {
      "name": "CVE-2022-42867",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42867"
    },
    {
      "name": "CVE-2022-42866",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42866"
    },
    {
      "name": "CVE-2022-42850",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42850"
    },
    {
      "name": "CVE-2022-46696",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46696"
    },
    {
      "name": "CVE-2022-42848",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42848"
    },
    {
      "name": "CVE-2022-42855",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42855"
    },
    {
      "name": "CVE-2022-46701",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46701"
    },
    {
      "name": "CVE-2022-42863",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42863"
    },
    {
      "name": "CVE-2022-42837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42837"
    },
    {
      "name": "CVE-2022-46689",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46689"
    },
    {
      "name": "CVE-2022-46691",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46691"
    },
    {
      "name": "CVE-2022-42859",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42859"
    },
    {
      "name": "CVE-2022-42856",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42856"
    },
    {
      "name": "CVE-2022-42844",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42844"
    },
    {
      "name": "CVE-2022-40303",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40303"
    },
    {
      "name": "CVE-2022-42840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42840"
    },
    {
      "name": "CVE-2022-42849",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42849"
    },
    {
      "name": "CVE-2022-46694",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46694"
    },
    {
      "name": "CVE-2022-42862",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42862"
    },
    {
      "name": "CVE-2022-46690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46690"
    },
    {
      "name": "CVE-2022-24836",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24836"
    },
    {
      "name": "CVE-2022-42841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42841"
    },
    {
      "name": "CVE-2022-42842",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42842"
    },
    {
      "name": "CVE-2022-42851",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42851"
    },
    {
      "name": "CVE-2022-42845",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42845"
    },
    {
      "name": "CVE-2022-42843",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42843"
    },
    {
      "name": "CVE-2022-46700",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46700"
    },
    {
      "name": "CVE-2022-42846",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42846"
    },
    {
      "name": "CVE-2022-32942",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-32942"
    },
    {
      "name": "CVE-2022-46702",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46702"
    },
    {
      "name": "CVE-2022-42847",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42847"
    },
    {
      "name": "CVE-2022-46695",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46695"
    },
    {
      "name": "CVE-2022-29181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29181"
    },
    {
      "name": "CVE-2022-46692",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46692"
    },
    {
      "name": "CVE-2022-42854",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42854"
    },
    {
      "name": "CVE-2022-40304",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40304"
    },
    {
      "name": "CVE-2022-46697",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46697"
    },
    {
      "name": "CVE-2022-42853",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42853"
    },
    {
      "name": "CVE-2022-46693",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46693"
    }
  ],
  "links": [],
  "reference": "CERTFR-2022-AVI-1108",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-12-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un contournement de la\npolitique de s\u00e9curit\u00e9 et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Apple du 13 d\u00e9cembre 2022",
      "url": "https://support.apple.com/en-us/HT213516"
    }
  ]
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "89495791-675B-413C-A86D-ECBADF4EDC4E",
              "versionEndExcluding": "16.2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B1B6657-43F5-4F0E-BE5C-5D828DEE066F",
              "versionEndExcluding": "16.2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "400AD564-BDEC-4C81-B650-56357BEBF0C7",
              "versionEndExcluding": "16.2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7A9F3F63-6BF8-4DD5-97FD-D9C90A62ECB0",
              "versionEndExcluding": "9.2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An access issue existed with privileged API calls. This issue was addressed with additional restrictions. This issue is fixed in iOS 16.2 and iPadOS 16.2, tvOS 16.2, watchOS 9.2. A user may be able to elevate privileges."
    },
    {
      "lang": "es",
      "value": "Exist\u00eda un problema de acceso con las llamadas API privilegiadas. Este problema se resolvi\u00f3 con restricciones adicionales. Este problema se solucion\u00f3 en iOS 16.2 y iPadOS 16.2, tvOS 16.2, watchOS 9.2. Un usuario puede aumentar sus privilegios."
    }
  ],
  "id": "CVE-2022-42849",
  "lastModified": "2025-04-21T15:15:52.750",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  },
  "published": "2022-12-15T19:15:24.583",
  "references": [
    {
      "source": "product-security@apple.com",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://seclists.org/fulldisclosure/2022/Dec/20"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://seclists.org/fulldisclosure/2022/Dec/26"
    },
    {
      "source": "product-security@apple.com",
      "url": "http://seclists.org/fulldisclosure/2022/Dec/27"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT213530"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT213535"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT213536"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://seclists.org/fulldisclosure/2022/Dec/20"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://seclists.org/fulldisclosure/2022/Dec/26"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://seclists.org/fulldisclosure/2022/Dec/27"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT213530"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT213535"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT213536"
    }
  ],
  "sourceIdentifier": "product-security@apple.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-269"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2022-42849"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-269",
      "CWE-863"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2022-12-15T19:15:00Z",
    "severity": "HIGH"
  },
  "details": "An access issue existed with privileged API calls. This issue was addressed with additional restrictions. This issue is fixed in iOS 16.2 and iPadOS 16.2, tvOS 16.2, watchOS 9.2. A user may be able to elevate privileges.",
  "id": "GHSA-4cm7-7r9p-hq66",
  "modified": "2025-04-21T15:31:10Z",
  "published": "2022-12-15T21:30:30Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42849"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT213530"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT213535"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT213536"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2022/Dec/20"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2022/Dec/26"
    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2022/Dec/27"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2022-42849",
    "description": "An access issue existed with privileged API calls. This issue was addressed with additional restrictions. This issue is fixed in iOS 16.2 and iPadOS 16.2, tvOS 16.2, watchOS 9.2. A user may be able to elevate privileges.",
    "id": "GSD-2022-42849"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-42849"
      ],
      "details": "An access issue existed with privileged API calls. This issue was addressed with additional restrictions. This issue is fixed in iOS 16.2 and iPadOS 16.2, tvOS 16.2, watchOS 9.2. A user may be able to elevate privileges.",
      "id": "GSD-2022-42849",
      "modified": "2023-12-13T01:19:10.300027Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "product-security@apple.com",
        "ID": "CVE-2022-42849",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "tvOS",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "unspecified"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "watchOS",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "unspecified"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Apple"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "An access issue existed with privileged API calls. This issue was addressed with additional restrictions. This issue is fixed in iOS 16.2 and iPadOS 16.2, tvOS 16.2, watchOS 9.2. A user may be able to elevate privileges."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "A user may be able to elevate privileges"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://support.apple.com/en-us/HT213535",
            "refsource": "MISC",
            "url": "https://support.apple.com/en-us/HT213535"
          },
          {
            "name": "https://support.apple.com/en-us/HT213530",
            "refsource": "MISC",
            "url": "https://support.apple.com/en-us/HT213530"
          },
          {
            "name": "https://support.apple.com/en-us/HT213536",
            "refsource": "MISC",
            "url": "https://support.apple.com/en-us/HT213536"
          },
          {
            "name": "http://seclists.org/fulldisclosure/2022/Dec/20",
            "refsource": "MISC",
            "url": "http://seclists.org/fulldisclosure/2022/Dec/20"
          },
          {
            "name": "http://seclists.org/fulldisclosure/2022/Dec/26",
            "refsource": "MISC",
            "url": "http://seclists.org/fulldisclosure/2022/Dec/26"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "16.2",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "16.2",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "9.2",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "16.2",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2022-42849"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "An access issue existed with privileged API calls. This issue was addressed with additional restrictions. This issue is fixed in iOS 16.2 and iPadOS 16.2, tvOS 16.2, watchOS 9.2. A user may be able to elevate privileges."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-863"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT213530",
              "refsource": "MISC",
              "tags": [
                "Release Notes",
                "Vendor Advisory"
              ],
              "url": "https://support.apple.com/en-us/HT213530"
            },
            {
              "name": "https://support.apple.com/en-us/HT213535",
              "refsource": "MISC",
              "tags": [
                "Release Notes",
                "Vendor Advisory"
              ],
              "url": "https://support.apple.com/en-us/HT213535"
            },
            {
              "name": "https://support.apple.com/en-us/HT213536",
              "refsource": "MISC",
              "tags": [
                "Release Notes",
                "Vendor Advisory"
              ],
              "url": "https://support.apple.com/en-us/HT213536"
            },
            {
              "name": "http://seclists.org/fulldisclosure/2022/Dec/26",
              "refsource": "MISC",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://seclists.org/fulldisclosure/2022/Dec/26"
            },
            {
              "name": "http://seclists.org/fulldisclosure/2022/Dec/20",
              "refsource": "MISC",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://seclists.org/fulldisclosure/2022/Dec/20"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2023-01-09T16:55Z",
      "publishedDate": "2022-12-15T19:15Z"
    }
  }
}

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202212-1221",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "ipados",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "apple",
        "version": "16.2"
      },
      {
        "model": "iphone os",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "apple",
        "version": "16.2"
      },
      {
        "model": "watchos",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "apple",
        "version": "9.2"
      },
      {
        "model": "tvos",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "apple",
        "version": "16.2"
      },
      {
        "model": "ipados",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30a2\u30c3\u30d7\u30eb",
        "version": null
      },
      {
        "model": "ios",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30a2\u30c3\u30d7\u30eb",
        "version": null
      },
      {
        "model": "tvos",
        "scope": null,
        "trust": 0.8,
        "vendor": "\u30a2\u30c3\u30d7\u30eb",
        "version": null
      },
      {
        "model": "watchos",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "\u30a2\u30c3\u30d7\u30eb",
        "version": "9.2"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-023648"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-42849"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "16.2",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "16.2",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "9.2",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "16.2",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-42849"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Apple",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "170318"
      },
      {
        "db": "PACKETSTORM",
        "id": "170317"
      },
      {
        "db": "PACKETSTORM",
        "id": "170311"
      }
    ],
    "trust": 0.3
  },
  "cve": "CVE-2022-42849",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "author": "NVD",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 1.8,
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Local",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 7.8,
            "baseSeverity": "High",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "CVE-2022-42849",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "Required",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "NVD",
            "id": "CVE-2022-42849",
            "trust": 1.8,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202212-3049",
            "trust": 0.6,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-023648"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-42849"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202212-3049"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "An access issue existed with privileged API calls. This issue was addressed with additional restrictions. This issue is fixed in iOS 16.2 and iPadOS 16.2, tvOS 16.2, watchOS 9.2. A user may be able to elevate privileges. iPadOS , iOS , tvOS Unspecified vulnerabilities exist in multiple Apple products.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state.  Alternatively, on your watch, select\n\"My Watch \u003e General \u003e About\". Apple is aware of a report that this issue\nmay have been actively exploited against versions of iOS released\nbefore iOS 15.1. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-2022-12-13-1 iOS 16.2 and iPadOS 16.2\n\niOS 16.2 and iPadOS 16.2 addresses the following issues. \nInformation about the security content is also available at\nhttps://support.apple.com/HT213530. \n\nAccounts\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: A user may be able to view sensitive user information\nDescription: This issue was addressed with improved data protection. \nCVE-2022-42843: Mickey Jin (@patch1t)\n\nAppleAVD\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: Parsing a maliciously crafted video file may lead to kernel\ncode execution\nDescription: An out-of-bounds write issue was addressed with improved\ninput validation. \nCVE-2022-46694: Andrey Labunets and Nikita Tarakanov\n\nAppleMobileFileIntegrity\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: An app may be able to bypass Privacy preferences\nDescription: This issue was addressed by enabling hardened runtime. \nCVE-2022-42865: Wojciech Regu\u0142a (@_r3ggi) of SecuRing\n\nAVEVideoEncoder\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: An app may be able to execute arbitrary code with kernel\nprivileges\nDescription: A logic issue was addressed with improved checks. \nCVE-2022-42848: ABC Research s.r.o\n\nCoreServices\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: An app may be able to bypass Privacy preferences\nDescription: Multiple issues were addressed by removing the\nvulnerable code. \nCVE-2022-42859: Mickey Jin (@patch1t), Csaba Fitzl (@theevilbit) of\nOffensive Security\n\nGPU Drivers\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: An app may be able to disclose kernel memory\nDescription: The issue was addressed with improved memory handling. \nCVE-2022-46702: Xia0o0o0o of W4terDr0p, Sun Yat-sen University\n\nGraphics Driver\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: An app may be able to execute arbitrary code with kernel\nprivileges\nDescription: The issue was addressed with improved memory handling. \nCVE-2022-42850: Willy R. Vasquez of The University of Texas at Austin\n\nGraphics Driver\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: Parsing a maliciously crafted video file may lead to\nunexpected system termination\nDescription: The issue was addressed with improved memory handling. \nCVE-2022-42846: Willy R. Vasquez of The University of Texas at Austin\n\nImageIO\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: Processing a maliciously crafted file may lead to arbitrary\ncode execution\nDescription: An out-of-bounds write issue was addressed with improved\ninput validation. \nCVE-2022-46693: Mickey Jin (@patch1t)\n\nImageIO\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: Parsing a maliciously crafted TIFF file may lead to\ndisclosure of user information\nDescription: The issue was addressed with improved memory handling. \nCVE-2022-42851: Mickey Jin (@patch1t)\n\nIOHIDFamily\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: An app may be able to execute arbitrary code with kernel\nprivileges\nDescription: A race condition was addressed with improved state\nhandling. \nCVE-2022-42864: Tommy Muir (@Muirey03)\n\nIOMobileFrameBuffer\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: An app may be able to execute arbitrary code with kernel\nprivileges\nDescription: An out-of-bounds write issue was addressed with improved\ninput validation. \nCVE-2022-46690: John Aakerblom (@jaakerblom)\n\niTunes Store\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: A remote user may be able to cause unexpected app termination\nor arbitrary code execution\nDescription: An issue existed in the parsing of URLs. \nCVE-2022-42837: Weijia Dai (@dwj1210) of Momo Security\n\nKernel\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: An app may be able to execute arbitrary code with kernel\nprivileges\nDescription: A race condition was addressed with additional\nvalidation. \nCVE-2022-46689: Ian Beer of Google Project Zero\n\nKernel\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: Connecting to a malicious NFS server may lead to arbitrary\ncode execution with kernel privileges\nDescription: The issue was addressed with improved bounds checks. \nCVE-2022-46701: Felix Poulin-Belanger\n\nKernel\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: A remote user may be able to cause kernel code execution\nDescription: The issue was addressed with improved memory handling. \nCVE-2022-42842: pattern-f (@pattern_F_) of Ant Security Light-Year\nLab\n\nKernel\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: An app may be able to break out of its sandbox\nDescription: This issue was addressed with improved checks. \nCVE-2022-42861: pattern-f (@pattern_F_) of Ant Security Light-Year\nLab\n\nKernel\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: An app may be able to break out of its sandbox\nDescription: The issue was addressed with improved memory handling. \nCVE-2022-42844: pattern-f (@pattern_F_) of Ant Security Light-Year\nLab\n\nKernel\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: An app with root privileges may be able to execute arbitrary\ncode with kernel privileges\nDescription: The issue was addressed with improved memory handling. \nCVE-2022-42845: Adam Doup\u00e9 of ASU SEFCOM\n\nPhotos\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: Shake-to-undo may allow a deleted photo to be re-surfaced\nwithout authentication\nDescription: The issue was addressed with improved bounds checks. \nCVE-2022-32943: an anonymous researcher\n\nppp\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: An app may be able to execute arbitrary code with kernel\nprivileges\nDescription: The issue was addressed with improved memory handling. \nCVE-2022-42840: an anonymous researcher\n\nPreferences\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: An app may be able to use arbitrary entitlements\nDescription: A logic issue was addressed with improved state\nmanagement. \nCVE-2022-42855: Ivan Fratric of Google Project Zero\n\nPrinting\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: An app may be able to bypass Privacy preferences\nDescription: This issue was addressed by removing the vulnerable\ncode. \nCVE-2022-42862: Mickey Jin (@patch1t)\n\nSafari\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: Visiting a website that frames malicious content may lead to\nUI spoofing\nDescription: A spoofing issue existed in the handling of URLs. \nCVE-2022-46695: KirtiKumar Anandrao Ramchandani\n\nSoftware Update\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: A user may be able to elevate privileges\nDescription: An access issue existed with privileged API calls. \nCVE-2022-42849: Mickey Jin (@patch1t)\n\nWeather\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: An app may be able to read sensitive location information\nDescription: The issue was addressed with improved handling of\ncaches. \nCVE-2022-42866: an anonymous researcher\n\nWebKit\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: Processing maliciously crafted web content may lead to\narbitrary code execution\nDescription: A use after free issue was addressed with improved\nmemory management. \nWebKit Bugzilla: 245521\nCVE-2022-42867: Maddie Stone of Google Project Zero\n\nWebKit\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: Processing maliciously crafted web content may lead to\narbitrary code execution\nDescription: A memory consumption issue was addressed with improved\nmemory handling. \nWebKit Bugzilla: 245466\nCVE-2022-46691: an anonymous researcher\n\nWebKit\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: Processing maliciously crafted web content may bypass Same\nOrigin Policy\nDescription: A logic issue was addressed with improved state\nmanagement. \nWebKit Bugzilla: 246783\nCVE-2022-46692: KirtiKumar Anandrao Ramchandani\n\nWebKit\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: Processing maliciously crafted web content may result in the\ndisclosure of process memory\nDescription: The issue was addressed with improved memory handling. \nCVE-2022-42852: hazbinhotel working with Trend Micro Zero Day\nInitiative\n\nWebKit\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: Processing maliciously crafted web content may lead to\narbitrary code execution\nDescription: A memory corruption issue was addressed with improved\ninput validation. \nWebKit Bugzilla: 246942\nCVE-2022-46696: Samuel Gro\u00df of Google V8 Security\nWebKit Bugzilla: 247562\nCVE-2022-46700: Samuel Gro\u00df of Google V8 Security\n\nWebKit\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: Processing maliciously crafted web content may disclose\nsensitive user information\nDescription: A logic issue was addressed with improved checks. \nCVE-2022-46698: Dohyun Lee (@l33d0hyun) of SSD Secure Disclosure Labs\n\u0026 DNSLab, Korea Univ. \n\nWebKit\nAvailable for: iPhone 8 and later, iPad Pro (all models), iPad Air\n3rd generation and later, iPad 5th generation and later, and iPad\nmini 5th generation and later\nImpact: Processing maliciously crafted web content may lead to\narbitrary code execution\nDescription: A memory corruption issue was addressed with improved\nstate management. \nWebKit Bugzilla: 247420\nCVE-2022-46699: Samuel Gro\u00df of Google V8 Security\nWebKit Bugzilla: 244622\nCVE-2022-42863: an anonymous researcher\n\nAdditional recognition\n\nKernel\nWe would like to acknowledge Zweig of Kunlun Lab and pattern-f\n(@pattern_F_) of Ant Security Light-Year Lab for their assistance. \n\nSafari Extensions\nWe would like to acknowledge Oliver Dunk and Christian R. of\n1Password for their assistance. \n\nWebKit\nWe would like to acknowledge an anonymous researcher and scarlet for\ntheir assistance. \n\nThis update is available through iTunes and Software Update on your\niOS device, and will not appear in your computer\u0027s Software Update\napplication, or in the Apple Downloads site. Make sure you have an\nInternet connection and have installed the latest version of iTunes\nfrom https://www.apple.com/itunes/  iTunes and Software Update on the\ndevice will automatically check Apple\u0027s update server on its weekly\nschedule. When an update is detected, it is downloaded and the option\nto be installed is presented to the user when the iOS device is\ndocked. We recommend applying the update immediately if possible. \nSelecting Don\u0027t Install will present the option the next time you\nconnect your iOS device.  The automatic update process may take up to\na week depending on the day that iTunes or the device checks for\nupdates. You may manually obtain the update via the Check for Updates\nbutton within iTunes, or the Software Update on your device.  To\ncheck that the iPhone, iPod touch, or iPad has been updated:  *\nNavigate to Settings * Select General * Select About. The version\nafter applying this update will be \"iOS 16.2 and iPadOS 16.2\". \nAll information is also posted on the Apple Security Updates\nweb site: https://support.apple.com/en-us/HT201222. \n\nThis message is signed with Apple\u0027s Product Security PGP key,\nand details are available at:\nhttps://www.apple.com/support/security/pgp/\n-----BEGIN PGP SIGNATURE-----\n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\nPJj9uuirFcmKJ1BSfEN1glq/gGW8SP1vuq1BU+fIdeHtw4XeeIw=\n=qV7H\n-----END PGP SIGNATURE-----\n\n\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-42849"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-023648"
      },
      {
        "db": "VULHUB",
        "id": "VHN-439648"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-42849"
      },
      {
        "db": "PACKETSTORM",
        "id": "170318"
      },
      {
        "db": "PACKETSTORM",
        "id": "170317"
      },
      {
        "db": "PACKETSTORM",
        "id": "170311"
      }
    ],
    "trust": 2.07
  },
  "exploit_availability": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "reference": "https://www.scap.org.cn/vuln/vhn-439648",
        "trust": 0.1,
        "type": "unknown"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-439648"
      }
    ]
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2022-42849",
        "trust": 3.7
      },
      {
        "db": "PACKETSTORM",
        "id": "170318",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-023648",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202212-3049",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "170317",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "170311",
        "trust": 0.2
      },
      {
        "db": "VULHUB",
        "id": "VHN-439648",
        "trust": 0.1
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-42849",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-439648"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-42849"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-023648"
      },
      {
        "db": "PACKETSTORM",
        "id": "170318"
      },
      {
        "db": "PACKETSTORM",
        "id": "170317"
      },
      {
        "db": "PACKETSTORM",
        "id": "170311"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-42849"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202212-3049"
      }
    ]
  },
  "id": "VAR-202212-1221",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-439648"
      }
    ],
    "trust": 0.01
  },
  "last_update_date": "2023-12-18T10:45:28.378000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "HT213535 Apple\u00a0 Security update",
        "trust": 0.8,
        "url": "https://support.apple.com/en-us/ht213530"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-023648"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "NVD-CWE-noinfo",
        "trust": 1.0
      },
      {
        "problemtype": "Lack of information (CWE-noinfo) [NVD evaluation ]",
        "trust": 0.8
      },
      {
        "problemtype": "CWE-863",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-439648"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-023648"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-42849"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.5,
        "url": "http://seclists.org/fulldisclosure/2022/dec/20"
      },
      {
        "trust": 2.5,
        "url": "http://seclists.org/fulldisclosure/2022/dec/26"
      },
      {
        "trust": 2.4,
        "url": "https://support.apple.com/en-us/ht213536"
      },
      {
        "trust": 1.9,
        "url": "http://seclists.org/fulldisclosure/2022/dec/27"
      },
      {
        "trust": 1.8,
        "url": "https://support.apple.com/en-us/ht213530"
      },
      {
        "trust": 1.8,
        "url": "https://support.apple.com/en-us/ht213535"
      },
      {
        "trust": 1.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-42849"
      },
      {
        "trust": 0.6,
        "url": "https://vigilance.fr/vulnerability/apple-ios-macos-multiple-vulnerabilities-of-december-2022-40105"
      },
      {
        "trust": 0.6,
        "url": "https://cxsecurity.com/cveshow/cve-2022-42849/"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/170318/apple-security-advisory-2022-12-13-8.html"
      },
      {
        "trust": 0.3,
        "url": "https://www.apple.com/support/security/pgp/"
      },
      {
        "trust": 0.3,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-42842"
      },
      {
        "trust": 0.3,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-42845"
      },
      {
        "trust": 0.3,
        "url": "https://support.apple.com/en-us/ht201222."
      },
      {
        "trust": 0.3,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-42843"
      },
      {
        "trust": 0.3,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-42852"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-40303"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-42865"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-42863"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-42864"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-40304"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-42837"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-42848"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-42855"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-42851"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-42867"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-42866"
      },
      {
        "trust": 0.1,
        "url": "https://support.apple.com/kb/ht204641"
      },
      {
        "trust": 0.1,
        "url": "https://support.apple.com/ht213536."
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-42859"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-42856"
      },
      {
        "trust": 0.1,
        "url": "https://support.apple.com/ht213535."
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-42850"
      },
      {
        "trust": 0.1,
        "url": "https://support.apple.com/ht213530."
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-32943"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-42844"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-42846"
      },
      {
        "trust": 0.1,
        "url": "https://www.apple.com/itunes/"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-42840"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-439648"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-42849"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-023648"
      },
      {
        "db": "PACKETSTORM",
        "id": "170318"
      },
      {
        "db": "PACKETSTORM",
        "id": "170317"
      },
      {
        "db": "PACKETSTORM",
        "id": "170311"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-42849"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202212-3049"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "VULHUB",
        "id": "VHN-439648"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-42849"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-023648"
      },
      {
        "db": "PACKETSTORM",
        "id": "170318"
      },
      {
        "db": "PACKETSTORM",
        "id": "170317"
      },
      {
        "db": "PACKETSTORM",
        "id": "170311"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-42849"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202212-3049"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-12-15T00:00:00",
        "db": "VULHUB",
        "id": "VHN-439648"
      },
      {
        "date": "2022-12-15T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-42849"
      },
      {
        "date": "2023-11-29T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-023648"
      },
      {
        "date": "2022-12-22T02:13:22",
        "db": "PACKETSTORM",
        "id": "170318"
      },
      {
        "date": "2022-12-22T02:12:53",
        "db": "PACKETSTORM",
        "id": "170317"
      },
      {
        "date": "2022-12-22T02:10:24",
        "db": "PACKETSTORM",
        "id": "170311"
      },
      {
        "date": "2022-12-15T19:15:24.583000",
        "db": "NVD",
        "id": "CVE-2022-42849"
      },
      {
        "date": "2022-12-13T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202212-3049"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2023-01-09T00:00:00",
        "db": "VULHUB",
        "id": "VHN-439648"
      },
      {
        "date": "2022-12-15T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-42849"
      },
      {
        "date": "2023-11-29T04:59:00",
        "db": "JVNDB",
        "id": "JVNDB-2022-023648"
      },
      {
        "date": "2023-11-07T03:53:38.747000",
        "db": "NVD",
        "id": "CVE-2022-42849"
      },
      {
        "date": "2022-12-30T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202212-3049"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "local",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202212-3049"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Vulnerabilities in multiple Apple products",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2022-023648"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "other",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202212-3049"
      }
    ],
    "trust": 0.6
  }
}

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Das Apple iOS (vormals iPhone OS) ist das Betriebssystem f\u00fcr das von Apple entwickelte Smartphone iPhone, iPad und iPod Touch.\r\nDas Apple iPadOS ist das Betriebssystem f\u00fcr das von Apple entwickelte iPad.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um seine Privilegien zu erh\u00f6hen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- iPhoneOS",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2022-2321 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-2321.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2022-2321 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-2321"
      },
      {
        "category": "external",
        "summary": "Apple Security Advisory vom 2022-12-13",
        "url": "https://support.apple.com/de-de/HT213530"
      },
      {
        "category": "external",
        "summary": "Apple Security Advisory vom 2022-12-13",
        "url": "https://support.apple.com/de-de/HT213531"
      },
      {
        "category": "external",
        "summary": "Apple Security Advisory HT213597 vom 2023-01-23",
        "url": "https://support.apple.com/en-us/HT213597"
      },
      {
        "category": "external",
        "summary": "CISA Known Exploited Vulnerabilities Catalog vom 2024-01-31",
        "url": "https://www.cisa.gov/news-events/alerts/2024/01/31/cisa-adds-one-known-exploited-vulnerability-catalog"
      }
    ],
    "source_lang": "en-US",
    "title": "Apple iOS: Mehrere Schwachstellen erm\u00f6glichen Privilegieneskalation",
    "tracking": {
      "current_release_date": "2024-07-03T22:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T17:39:57.967+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2022-2321",
      "initial_release_date": "2022-12-13T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2022-12-13T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2023-01-23T23:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Apple aufgenommen"
        },
        {
          "date": "2023-04-10T22:00:00.000+00:00",
          "number": "3",
          "summary": "CVE erg\u00e4nzt"
        },
        {
          "date": "2023-05-02T22:00:00.000+00:00",
          "number": "4",
          "summary": "CVE-2022-46718 erg\u00e4nzt"
        },
        {
          "date": "2024-01-31T23:00:00.000+00:00",
          "number": "5",
          "summary": "CVE-2022-48618 erg\u00e4nzt, wird aktiv ausgenutzt"
        },
        {
          "date": "2024-07-03T22:00:00.000+00:00",
          "number": "6",
          "summary": "CVE erg\u00e4nzt"
        }
      ],
      "status": "final",
      "version": "6"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c15.7.2",
                "product": {
                  "name": "Apple iOS \u003c15.7.2",
                  "product_id": "T025602"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c16.2",
                "product": {
                  "name": "Apple iOS \u003c16.2",
                  "product_id": "T025606"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c12.5.7",
                "product": {
                  "name": "Apple iOS \u003c12.5.7",
                  "product_id": "T025991"
                }
              }
            ],
            "category": "product_name",
            "name": "iOS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c15.7.2",
                "product": {
                  "name": "Apple iPadOS \u003c15.7.2",
                  "product_id": "T025604"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c16.2",
                "product": {
                  "name": "Apple iPadOS \u003c16.2",
                  "product_id": "T025605"
                }
              }
            ],
            "category": "product_name",
            "name": "iPadOS"
          }
        ],
        "category": "vendor",
        "name": "Apple"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-32943",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-32943"
    },
    {
      "cve": "CVE-2022-40303",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-40303"
    },
    {
      "cve": "CVE-2022-40304",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-40304"
    },
    {
      "cve": "CVE-2022-42837",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-42837"
    },
    {
      "cve": "CVE-2022-42840",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-42840"
    },
    {
      "cve": "CVE-2022-42842",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-42842"
    },
    {
      "cve": "CVE-2022-42843",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-42843"
    },
    {
      "cve": "CVE-2022-42844",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-42844"
    },
    {
      "cve": "CVE-2022-42845",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-42845"
    },
    {
      "cve": "CVE-2022-42846",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-42846"
    },
    {
      "cve": "CVE-2022-42848",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-42848"
    },
    {
      "cve": "CVE-2022-42849",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-42849"
    },
    {
      "cve": "CVE-2022-42850",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-42850"
    },
    {
      "cve": "CVE-2022-42851",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-42851"
    },
    {
      "cve": "CVE-2022-42852",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-42852"
    },
    {
      "cve": "CVE-2022-42855",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-42855"
    },
    {
      "cve": "CVE-2022-42856",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-42856"
    },
    {
      "cve": "CVE-2022-42859",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-42859"
    },
    {
      "cve": "CVE-2022-42861",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-42861"
    },
    {
      "cve": "CVE-2022-42862",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-42862"
    },
    {
      "cve": "CVE-2022-42863",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-42863"
    },
    {
      "cve": "CVE-2022-42864",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-42864"
    },
    {
      "cve": "CVE-2022-42865",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-42865"
    },
    {
      "cve": "CVE-2022-42866",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-42866"
    },
    {
      "cve": "CVE-2022-42867",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-42867"
    },
    {
      "cve": "CVE-2022-46689",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-46689"
    },
    {
      "cve": "CVE-2022-46690",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-46690"
    },
    {
      "cve": "CVE-2022-46691",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-46691"
    },
    {
      "cve": "CVE-2022-46692",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-46692"
    },
    {
      "cve": "CVE-2022-46693",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-46693"
    },
    {
      "cve": "CVE-2022-46694",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-46694"
    },
    {
      "cve": "CVE-2022-46695",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-46695"
    },
    {
      "cve": "CVE-2022-46696",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-46696"
    },
    {
      "cve": "CVE-2022-46698",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-46698"
    },
    {
      "cve": "CVE-2022-46699",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-46699"
    },
    {
      "cve": "CVE-2022-46700",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-46700"
    },
    {
      "cve": "CVE-2022-46701",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-46701"
    },
    {
      "cve": "CVE-2022-46702",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-46702"
    },
    {
      "cve": "CVE-2022-46703",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-46703"
    },
    {
      "cve": "CVE-2022-46710",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-46710"
    },
    {
      "cve": "CVE-2022-46717",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-46717"
    },
    {
      "cve": "CVE-2022-46718",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-46718"
    },
    {
      "cve": "CVE-2022-48618",
      "notes": [
        {
          "category": "description",
          "text": "In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten \"Accounts\", \"AppleAVD\", \"AppleMobileFileIntegrity\", \"AVEVideoEncoder\", \"CoreServices\", \"GPU Drivers\", \"Graphics Driver\", \"ImageIO\", \"IOHIDFamily\", \"IOMobileFrameBuffer\", \"iTunes Store\", \"Kernel\", \"Photos\", \"ppp\", \"Preferences\", \"Printing\", \"Safari\", \"Software Update\", \"Weather\" sowie \"WebKit\". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich."
        }
      ],
      "product_status": {
        "known_affected": [
          "T025991"
        ]
      },
      "release_date": "2022-12-13T23:00:00.000+00:00",
      "title": "CVE-2022-48618"
    }
  ]
}