PT-2022-15603 · Apple · Ipados+2

Csaba Fitzl + 1 · Published 2022-03-14 · Updated 2023-08-18 · CVE-2022-22655

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS Monterey versions prior to 12.3 iOS versions prior to 15.4 iPadOS versions prior to 15.4

Description An access issue was addressed with improvements to the sandbox, which may have allowed an app to leak sensitive user information.

Recommendations For macOS Monterey, update to version 12.3 or later. For iOS, update to version 15.4 or later. For iPadOS, update to version 15.4 or later.

Fix

Related Identifiers

CVE-2022-22655

Affected Products

Apple Macos

Ios

Ipados

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2022-22655 · Security Note
• https://osv.dev/vulnerability/CVE-2022-22655 · Vendor Advisory
• https://support.apple.com/en-us/HT213182 · Vendor Advisory
• https://support.apple.com/en-us/HT213183 · Vendor Advisory
• https://github.com/LloydLabs/ntqueueapcthreadex-ntdll-gadget-injection · Note
• https://t.me/cvenotify/56888 · Telegram Post
• https://t.me/pentestingnews/33328 · Telegram Post
• https://t.me/cybersecuritytechnologies/7793 · Telegram Post
• https://twitter.com/CVEnew/status/1691221490643980288 · Twitter Post
• https://support.apple.com/en-us/102882 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22655 · Note