← back
CVE-2022-26757

CVE-2022-26757

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.9%
exploitation probability
2.9%top 14% of all CVEs
observed exploitation
nono source reports it
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.
Affected products
Apple · watchOS
References
http://packetstormsecurity.com/files/167517/XNU-Flow-Divert-Race-Condition-Use-After-Free.htmlhttps://support.apple.com/en-us/HT213253https://support.apple.com/en-us/HT213254https://support.apple.com/en-us/HT213255https://support.apple.com/en-us/HT213256https://support.apple.com/en-us/HT213257https://support.apple.com/en-us/HT213258