by Kastro
Paper/Archive/CVE-2022-46709

CVE-2022-46709

Apple macOS — A memory corruption issue was addressed with improved state management.

EPSS 0.8%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (NVD, ADP agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 55.4.554 × 2011.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, iOS 16. An app may be able to execute arbitrary code with kernel privileges

Affected

ProductAffectedFixed inSource
macOSunspecified – < 1313CNA
macOSunspecified – < 1616CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.apple.com/en-us/HT213446refsupport.apple.com/en-us/HT213488