CVEvulnerability
CVE-2022-26702
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-05-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-416
Description
A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 8.6, tvOS 15.5, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.
Affected configurations
• apple ipados (< 15.5)
• apple iphone os (< 15.5)
• apple tvos (< 15.5)
• apple watchos (< 8.6)
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- http://seclists.org/fulldisclosure/2023/Mar/21 seclists.org
- https://support.apple.com/en-us/HT213253 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213254 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213258 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213675 support.apple.com
- http://seclists.org/fulldisclosure/2023/Mar/21 seclists.org
- https://support.apple.com/en-us/HT213253 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213254 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213258 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213675 support.apple.com