CVE-2022-42789

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. An app may be able to access user-sensitive data.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected software

Vendor	Product	Versions
Apple	macOS	>= unspecified, < 13
Apple	macOS	>= unspecified, < 11.7
Apple	macOS	>= unspecified, < 12.6

References

https://support.apple.com/en-us/HT213443Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213444Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213488Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213443Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213444Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213488Release Notes, Vendor Advisory

Timeline

Published: Nov 1, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-42796.1A vulnerability classified as problematic has been found in SourceCodester Human Resource Management System 1.0. Affected is an unknown func CVE-2022-427905.5A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 an CVE-2022-427917.0A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrar CVE-2022-427925.5This issue was addressed with improved data protection. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to read sensitive CVE-2022-427935.5An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 1 CVE-2022-427958.8A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 16, iOS 16, macOS Ventura 13, watchOS 9.CVE-2022-427967.8This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 15.7 and iPadOS 15.7, macOS Ventura 13. An app may be a CVE-2022-427977.8An injection issue was addressed with improved input validation. This issue is fixed in Xcode 14.1. An app may be able to gain root privileg CVE-2022-427985.5The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, wat CVE-2022-427996.1The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 an CVE-2022-42807.5A vulnerability, which was classified as problematic, has been found in Dot Tech Smart Campus System. Affected by this issue is some unknown CVE-2022-428007.8This issue was addressed with improved checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1