CVE-2022-42808

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. A remote user may be able to cause kernel code execution.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Nov 1, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-428097.8The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted gcx file maCVE-2022-42818.8A vulnerability has been found in Facepay 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the CVE-2022-428105.5The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, tvOS 16.1, iOS 16.1 and iPadOS 1CVE-2022-428115.5An access issue was addressed with additional sandbox restrictions. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura CVE-2022-428139.8A certificate validation issue existed in the handling of WKWebView. This issue was addressed with improved validation. This issue is fixed CVE-2022-428145.5A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitive data.CVE-2022-428155.5This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitiveCVE-2022-428165.5A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to modify protected CVE-2022-428176.5A logic issue was addressed with improved state management. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16, watCVE-2022-428185.9This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. A user in a privileged network position mayCVE-2022-428195.5An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS MontereyCVE-2022-42827.2A vulnerability was found in SpringBootCMS and classified as critical. Affected by this issue is some unknown functionality of the component