CVE-2022-46706 in macOS

Summary

by MITRE • 08/15/2023

A type confusion issue was addressed with improved state handling. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to execute arbitrary code with kernel privileges.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 12/07/2022
• Disclosure: 08/15/2023
• Moderation: accepted
• Entry: VDB-228961
• CPE: ready
• CWE: CWE-843 (unconfirmed)
• CVSS: 5.3 (VulDB)
• EPSS: 0.00036
• KEV: no
• Activities: very low
• Sector: Finance, Government, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-46706
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-46706
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-46706/