Details of VAR-202210-1496

ID

VAR-202210-1496

CVE

CVE-2022-42796

TITLE

Apple macOS Security hole

Trust: 0.6

sources: CNNVD: CNNVD-202210-1644

DESCRIPTION

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 15.7 and iPadOS 15.7, macOS Ventura 13. An app may be able to gain elevated privileges

Trust: 0.99

sources: NVD: CVE-2022-42796 // VULHUB: VHN-439576

AFFECTED PRODUCTS

vendor:	apple	model:	ipados	scope:	lt	version:	15.7	Trust: 1.0
vendor:	apple	model:	iphone os	scope:	lt	version:	15.7	Trust: 1.0
vendor:	apple	model:	macos	scope:	lt	version:	13.0	Trust: 1.0

sources: NVD: CVE-2022-42796

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD:	CVE-2022-42796
value:	HIGH
Trust: 1.0
CNNVD:	CNNVD-202210-1644
value:	HIGH
Trust: 0.6

NVD:
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.1
Trust: 1.0

sources: NVD: CVE-2022-42796 // CNNVD: CNNVD-202210-1644

PROBLEMTYPE DATA

problemtype:

NVD-CWE-noinfo

Trust: 1.0

sources: NVD: CVE-2022-42796

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202210-1644

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202210-1644

CONFIGURATIONS

sources: NVD: CVE-2022-42796

PATCH

title:

Apple macOS Security vulnerabilities

url:

http://123.124.177.30/web/xxk/bdxqbyid.tag?id=212667

Trust: 0.6

sources: CNNVD: CNNVD-202210-1644

EXTERNAL IDS

db:	NVD	id:	CVE-2022-42796	Trust: 1.7
db:	AUSCERT	id:	ESB-2022.5300	Trust: 0.6
db:	CNNVD	id:	CNNVD-202210-1644	Trust: 0.6
db:	VULHUB	id:	VHN-439576	Trust: 0.1

sources: VULHUB: VHN-439576 // NVD: CVE-2022-42796 // CNNVD: CNNVD-202210-1644

REFERENCES

url:	https://support.apple.com/en-us/ht213488	Trust: 2.3
url:	https://support.apple.com/en-us/ht213445	Trust: 1.7
url:	https://cxsecurity.com/cveshow/cve-2022-42796/	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2022.5300	Trust: 0.6
url:	https://vigilance.fr/vulnerability/apple-macos-multiple-vulnerabilities-39702	Trust: 0.6

sources: VULHUB: VHN-439576 // NVD: CVE-2022-42796 // CNNVD: CNNVD-202210-1644

SOURCES

db:	VULHUB	id:	VHN-439576
db:	NVD	id:	CVE-2022-42796
db:	CNNVD	id:	CNNVD-202210-1644

LAST UPDATE DATE

2023-12-18T11:06:14.550000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-439576	date:	2022-11-03T00:00:00
db:	NVD	id:	CVE-2022-42796	date:	2022-11-03T03:52:34.787
db:	CNNVD	id:	CNNVD-202210-1644	date:	2022-11-04T00:00:00

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-439576	date:	2022-11-01T00:00:00
db:	NVD	id:	CVE-2022-42796	date:	2022-11-01T20:15:22.770
db:	CNNVD	id:	CNNVD-202210-1644	date:	2022-10-24T00:00:00