| CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
|---|---|---|
| 5.3 | $0-$5k | 0.00 |
Summary
A vulnerability, which was classified as problematic, was found in Apple macOS. This impacts an unknown function of the component Security. Such manipulation leads to an unknown weakness. This vulnerability is traded as CVE-2022-42793. An attack has to be approached locally. There is no exploit available. You should upgrade the affected component.
Details
A vulnerability was found in Apple macOS (Operating System) (affected version not known) and classified as problematic. Affected by this issue is some unknown functionality of the component Security. Using CWE to declare the problem leads to CWE-347. The product does not verify, or incorrectly verifies, the cryptographic signature for data. Impacted is confidentiality, integrity, and availability.
The weakness was shared 10/24/2022 by Linus Henze as HT213488 as confirmed advisory (Website). The advisory is shared for download at support.apple.com. This vulnerability is handled as CVE-2022-42793. There are neither technical details nor an exploit publicly available. The advisory points out:
An app may be able to bypass code signing checks
Upgrading eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability. The advisory contains the following remark:
An issue in code signature validation was addressed with improved checks.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Product
Type
Vendor
Name
License
Website
- Vendor: https://www.apple.com/
CPE 2.3
CPE 2.2
CVSSv4
VulDB Vector: 🔍VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 5.4VulDB Meta Temp Score: 5.3
VulDB Base Score: 5.3
VulDB Temp Score: 5.1
VulDB Vector: 🔍
VulDB Reliability: 🔍
NVD Base Score: 5.5
NVD Vector: 🔍
CVSSv2
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
Exploiting
Class: Signature verificationCWE: CWE-347 / CWE-345
CAPEC: 🔍
ATT&CK: 🔍
Physical: Partially
Local: Yes
Remote: Partially
Availability: 🔍
Status: Not defined
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
| 0-Day | Unlock | Unlock | Unlock | Unlock |
|---|---|---|---|---|
| Today | Unlock | Unlock | Unlock | Unlock |
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
Reaction Time: 🔍
0-Day Time: 🔍
Exposure Time: 🔍
Timeline
10/11/2022 🔍10/24/2022 🔍
10/24/2022 🔍
10/25/2022 🔍
04/22/2025 🔍
Sources
Vendor: apple.comAdvisory: HT213488
Researcher: Linus Henze
Status: Confirmed
CVE: CVE-2022-42793 (🔍)
GCVE (CVE): GCVE-0-2022-42793
GCVE (VulDB): GCVE-100-212144
scip Labs: https://www.scip.ch/en/?labs.20180712
Entry
Created: 10/25/2022 08:53Updated: 04/22/2025 21:27
Changes: 10/25/2022 08:53 (2), 10/25/2022 08:54 (14), 10/25/2022 08:57 (28), 11/23/2022 16:03 (2), 11/23/2022 16:10 (12), 04/22/2025 21:27 (17)
Complete: 🔍
Cache ID: 216::103
VulDB is the best source for vulnerability data and more expert information about this specific topic.
No comments yet. Languages: en.
Please log in to comment.