Vulnerability · Published Nov 1, 2022 · Assigned by apple

CVE-2022-42790

Medium 5.5

In plain English

A medium-severity security flaw in macOS from Apple. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.3%top 75.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, macOS Monterey 12.6. A user may be able to view restricted content from the lock screen.

Affected products (as reported)

VendorProductVersions
Apple macOS unspecified – before 13
Apple macOS unspecified – before 16
Apple macOS unspecified – before 11.7
Apple macOS unspecified – before 15.7
Apple macOS unspecified – before 12.6

References