CVE-2022-48504

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

The issue was addressed with improved handling of caches. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitive data.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected software

VendorProductVersions
ApplemacOS>= unspecified, < 13

References

Timeline

Published
Jan 10, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-485055.5This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to modify protected partCVE-2022-485062.4A flawed pseudorandom number generator in Dominion Voting Systems ImageCast Precinct (ICP and ICP2) and ImageCast Evolution (ICE) scanners aCVE-2022-485077.5Vulnerability of identity verification being bypassed in the storage module. Successful exploitation of this vulnerability may affect servicCVE-2022-485087.5Inappropriate authorization vulnerability in the system apps. Successful exploitation of this vulnerability may affect service integrity.CVE-2022-485095.9Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulCVE-2022-48515.3Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-485109.8Input verification vulnerability in the AMS module. Successful exploitation of this vulnerability will cause unauthorized operations.CVE-2022-485119.8Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions. Successful exploitation of this vulnerability maCVE-2022-485129.8Use After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decodinCVE-2022-485139.8Vulnerability of identity verification being bypassed in the Gallery module. Successful exploitation of this vulnerability may cause out-of-CVE-2022-485147.5The Sepolicy module has inappropriate permission control on the use of Netlink.Successful exploitation of this vulnerability may affect confCVE-2022-485157.5Vulnerability of inappropriate permission control in Nearby. Successful exploitation of this vulnerability may affect service confidentialit
CVE-2022-48504: Medium severity, CVSS 5.5 | Vulnix