CVE-2022-48618 kev in the critical feed json
The issue was addressed with improved checks.
published 2024-01-09 2 y ago modified 2026-06-17 4 mo ago also EUVD-2022-51313
- cvss
- 7.0
- version 3.1, CNA
- cisa kev
- Exploited
- added 2024-01-31
- epss
- 0.5%
- EPSS 0.5% chance of exploitation in 30 days, percentile 42%
- public exploits
- 0
- none known
Summary
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited against versions of iOS released before iOS 15.7.1.
Patch / fix
cisa required action Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Apple tvOS 16.2
- Apple macOS 13.1
- Apple iOS and iPadOS 16.2
- Apple watchOS 9.2, 16.2
- apple iphone_os 16.2
- apple ipados 16.2
Timeline
- Published
- Added to CISA KEV
- CISA patch deadline
- CISA SSVC: exploitation active
Known exploited
- Added
- 2 y ago
- Patch by
- 2024-02-21 (2 y ago)
- Ransomware
- Not known
- Required action
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Vendor, product
- Apple, Multiple Products
- CISA name
- Apple Multiple Products Memory Corruption Vulnerability
CISA SSVC
- Exploitation
- Active, exploited in the wild
- Automatable
- no
- Technical impact
- total
- Assessed
- 18 mo ago
Exploit prediction
0.49% chance of exploitation in the next 30 days, higher than 42% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 7.0 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 7.0 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 7.0 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected products
- Apple tvOS
- Apple macOS
- Apple iOS and iPadOS
- Apple watchOS
- apple iphone_os
- apple ipados
Classification
- Weakness
-
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition
References
-
support.apple.com
/en-us/HT213535
release-notes, vendor-advisory
-
support.apple.com
/en-us/HT213532
release-notes, vendor-advisory
-
support.apple.com
/en-us/HT213530
release-notes, vendor-advisory
-
support.apple.com
/en-us/HT213536
release-notes, vendor-advisory
-
cisa.gov
/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-48618
government-resource, us-government-resource
Sources
- CVE List CVE-2022-48618
- NVD CVE-2022-48618
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.