CVE-2022-46690highexploração observadaCWE-787

CVE-2022-46690: falha de alta gravidade em Apple tvOS

Publicada em 15 dez 2022 · Atualizada em 21 abr 2025

Seguir esta CVE + Monitorar watchOS + Monitorar tvOS

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

43Vexday Risk Score

Priorize a correção. Ela exploração observada pelo VulnCheck.

ssvc Actcvss 7.8epss 0.6%

da publicação à arma

Publicada no NVD15 de dez.

VulnCheck+198d

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Produtos afetados

Apple · tvOS Apple · watchOS

CVEs relacionadas — Apple tvOS

No mesmo produto, das mais perigosas para as menos.

CVE-2021-30860HIGHCVE-2021-30860EPSS 76.0%KEV CVE-2023-32434HIGHCVE-2023-32434EPSS 58.2%KEV CVE-2025-43529HIGHCVE-2025-43529EPSS 25.7%KEV CVE-2020-27930HIGHCVE-2020-27930EPSS 22.0%KEV CVE-2025-31200CRITICALCVE-2025-31200EPSS 20.9%KEV CVE-2023-37450HIGHCVE-2023-37450EPSS 18.9%KEV

Referências

http://seclists.org/fulldisclosure/2022/Dec/20 http://seclists.org/fulldisclosure/2022/Dec/23 http://seclists.org/fulldisclosure/2022/Dec/26 http://seclists.org/fulldisclosure/2022/Dec/27 https://support.apple.com/en-us/HT213530 https://support.apple.com/en-us/HT213532 https://support.apple.com/en-us/HT213535 https://support.apple.com/en-us/HT213536