CVEvulnerability
CVE-2022-48610
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-03-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-200
Description
This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2. An app may be able to access user-sensitive data.
Affected configurations
• apple ipados (< 16.2)
• apple iphone os (< 16.2)
• apple macos (< 13.1)
• apple watchos (< 9.2)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- https://support.apple.com/en-us/102741 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/102807 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/102808 Release Notes, Vendor Advisory