Lucene search
HistoryNov 01, 2022 - 8:15 p.m.
CVE-2022-42793
macos
ios
code signing
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
30.2%
An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, macOS Monterey 12.6. An app may be able to bypass code signing checks.
Affected configurations
Node
appleipadosRange<15.7
ORappleiphone_osRange<15.7
ORapplemacosRange11.0–11.7
ORapplemacosRange12.0–12.6
Related
cve
cve
CVE-2022-42793
2022-11-01 20:15:22
prion
prion
Design/Logic Flaw
2022-11-01 20:15:00
cvelist
cvelist
CVE-2022-42793
2022-11-01 00:00:00
apple
apple
About the security content of iOS 15.7 and iPadOS 15.7
2022-09-12 00:00:00
About the security content of macOS Big Sur 11.7
2022-09-12 00:00:00
About the security content of macOS Monterey 12.6
2022-09-12 00:00:00
nessus
nessus
macOS 12.x < 12.6 Multiple Vulnerabilities (HT213444)
2022-09-15 00:00:00
openvas
openvas
Apple Mac OS X Security Update (HT213488)
2023-07-25 00:00:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
30.2%
Related for NVD:CVE-2022-42793