CVE-2022-48618: high-severity vulnerability in Apple macOS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
A security mechanism called Pointer Authentication, which protects against certain types of attacks on Apple devices, could be bypassed if an attacker gains read and write access to device memory. This is serious because it could allow attackers to run malicious code without being detected.
A time-of-check-time-of-use (TOCTOU) race condition in Pointer Authentication implementation allows an attacker with arbitrary memory read/write capability to bypass the authentication checks protecting code pointers. This requires prior memory access but could enable privilege escalation or code execution bypass on affected iOS, iPadOS, watchOS, and tvOS versions prior to the specified patches.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.