PT-2022-6845 · Apple · Apple Macos

Pan Zhenpeng + 2 · Published 2022-03-14 · Updated 2023-08-19 · CVE-2022-46706

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to macOS Monterey 12.3 macOS versions prior to macOS Big Sur 11.6.5 macOS Catalina versions prior to Security Update 2022-003

Description A type confusion issue was addressed with improved state handling, which may allow an application to execute arbitrary code with kernel privileges.

Recommendations For macOS Catalina versions prior to Security Update 2022-003, apply Security Update 2022-003. For macOS Big Sur versions prior to 11.6.5, update to macOS Big Sur 11.6.5. For macOS Monterey versions prior to 12.3, update to macOS Monterey 12.3.

Fix

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

BDU:2023-05118

CVE-2022-46706

Affected Products

Apple Macos

References · 14

• https://osv.dev/vulnerability/CVE-2022-46706 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-05118 · Security Note
• https://support.apple.com/en-us/HT213185 · Vendor Advisory
• https://support.apple.com/en-us/HT213183 · Vendor Advisory
• https://support.apple.com/en-us/HT213184 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-46706 · Security Note
• https://rapid7.com/db/vulnerabilities/apple-osx-intelgraphicsdriver-cve-2022-46706 · Note
• https://t.me/cvenotify/56487 · Telegram Post
• https://t.me/cibsecurity/68503 · Telegram Post
• https://twitter.com/CVEnew/status/1691221495077392386 · Twitter Post
• https://support.apple.com/en-us/102847 · Note
• https://support.apple.com/en-us/102882 · Note
• https://t.me/cvenotify/56905 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-46706 · Note