CVE-2022-42793

Summary

An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, macOS Monterey 12.6. An app may be able to bypass code signing checks.

Affected Software

Weaknesses

• An app may be able to bypass code signing checks

ADP Enrichment

CVE Program Container

Additional References

• https://support.apple.com/en-us/HT213446
• https://support.apple.com/en-us/HT213443
• https://support.apple.com/en-us/HT213445
• https://support.apple.com/en-us/HT213444
• https://support.apple.com/en-us/HT213488

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://support.apple.com/en-us/HT213446
• https://support.apple.com/en-us/HT213443
• https://support.apple.com/en-us/HT213445
• https://support.apple.com/en-us/HT213444
• https://support.apple.com/en-us/HT213488

• ←Previous
• Next→