VDB

CISA-2022-26765

CISA-2022-26765 PUBLISHED CVSS 4.7 MEDIUM

Reported by apple · Published May 26, 2022

A race condition was addressed with improved state handling. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.

Risk Scores

CVSS 3.1
4.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected Products

VendorProductVersions
ApplewatchOSunspecified
ApplewatchOSunspecified
ApplewatchOSunspecified
ApplewatchOSunspecified
ApplewatchOSunspecified, unspecified, unspecified

Timeline

  • May 26, 2022 CVE Published
  • May 30, 2025 CVE Updated

References

  • x_refsource_MISC
  • x_refsource_MISC
  • x_refsource_MISC
  • x_refsource_MISC
Open in Interactive Console →
$ Console Community · 100/wk Open console ›