Skip to content
Sign in
CVE-2022-486187.0HighCWE-367

CVE-2022-48618: Apple tvOS vulnerability

Apple · tvOS

Vendor fix available · Affected: Apple tvOS · Exploitation: in CISA KEV since 31 Jan 2024

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

ExploitationIn CISA KEV

  1. In CISA KEVCISA KEV catalogue31 Jan 2024
  2. Exploited (reported): not seen
  3. Scanning observed: not seen
  4. Proof of concept public: not seen
  5. Not established: not seen
0.5%probability of exploitation in the next 30 days
42nd percentile
050100

Higher than 42% of scored CVEs

7.0HighCVSS 3.1
LowHigh

DescriptionCVE.org

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited against versions of iOS released before iOS 15.7.1.

Affected products4

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • Apple · tvOSbefore 16.2
  • Apple · macOSbefore 13.1
  • Apple · iOS and iPadOSbefore 16.2
  • Apple · watchOSbefore 9.2

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Exploited in the wild. Listed in the CISA Known Exploited Vulnerabilities catalogue.
CISA KEV
Listed since 31 Jan 2024 · catalogue entry
Public check
No public nuclei template
Vendor
Apple
Published
January 2024

What changed

  1. CISA added it to the KEV catalogue CISA

CoverageNo articles yet

No CyberSIXT article names CVE-2022-48618 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References

Updated AboutDevelopersSign in