CVE-2022-42807

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. A user may accidentally add a participant to a Shared Album by pressing the Delete key

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-640

Affected software

No affected versions have been published.

Timeline

Published
Jun 23, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-428089.8An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS VeCVE-2022-428097.8The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted gcx file maCVE-2022-42818.8A vulnerability has been found in Facepay 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the CVE-2022-428105.5The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, tvOS 16.1, iOS 16.1 and iPadOS 1CVE-2022-428115.5An access issue was addressed with additional sandbox restrictions. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura CVE-2022-428139.8A certificate validation issue existed in the handling of WKWebView. This issue was addressed with improved validation. This issue is fixed CVE-2022-428145.5A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitive data.CVE-2022-428155.5This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitiveCVE-2022-428165.5A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to modify protected CVE-2022-428176.5A logic issue was addressed with improved state management. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16, watCVE-2022-428185.9This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. A user in a privileged network position mayCVE-2022-428195.5An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey
CVE-2022-42807: Medium severity, CVSS 4.3 | Vulnix