VULNERABILITY INTELLIGENCE

CVE-2022-42791

CVSS score7 HIGH

EPSS probability0.28%

CISA KEVNot currently listed

Published2022-11-01

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.

Weakness classification

nvd@nist.gov: CWE-362
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-362

Primary references

product-security@apple.com — Release Notes, Vendor Advisory
product-security@apple.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory