CVE-2022-42865

This issue was addressed by enabling hardened runtime. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. An app may be able to bypass Privacy preferences.

Score

CVSS 3.1 5.5 Medium

Status

Modified - product-security@apple.com

Published

2022-12-15

Last modified

2025-04-21

Weaknesses

CWE-284

Affected products

• Ipados (Apple)
• Iphone Os (Apple)
• Macos (Apple)
• Tvos (Apple)
• Watchos (Apple)

References

• http://seclists.org/fulldisclosure/2022/Dec/20
• http://seclists.org/fulldisclosure/2022/Dec/23
• http://seclists.org/fulldisclosure/2022/Dec/26
• http://seclists.org/fulldisclosure/2022/Dec/27
• https://support.apple.com/en-us/HT213530
• https://support.apple.com/en-us/HT213532
• https://support.apple.com/en-us/HT213535
• https://support.apple.com/en-us/HT213536
• https://support.apple.com/kb/HT213534