VDB
CISA-2022-42866
CISA-2022-42866
PUBLISHED
CVSS 5.5 MEDIUM
Reported by apple · Published December 15, 2022
The issue was addressed with improved handling of caches. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. An app may be able to read sensitive location information.
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | tvOS | unspecified |
| Apple | tvOS | unspecified |
| Apple | tvOS | unspecified |
| Apple | watchOS | unspecified |
| Apple | tvOS | *, unspecified, unspecified |
| Apple | watchOS | unspecified, unspecified |
Timeline
- Dec 15, 2022 CVE Published
- Apr 21, 2025 CVE Updated
References
- 20221220 APPLE-SA-2022-12-13-1 iOS 16.2 and iPadOS 16.2 mailing-list
- 20221220 APPLE-SA-2022-12-13-4 macOS Ventura 13.1 mailing-list
- 20221220 APPLE-SA-2022-12-13-7 tvOS 16.2 mailing-list
- 20221220 APPLE-SA-2022-12-13-8 watchOS 9.2 mailing-list