CVE-2022-22578
First published: Wed Jan 26 2022(Updated: )
A logic issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and iPadOS 15.3, watchOS 8.4, macOS Monterey 12.2. A malicious application may be able to gain root privileges.
Credit: Zhipeng Huo @R3dF09 Yuebin Sun @yuebinsun2020 Tencent Security Xuanwu Lab product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple macOS Monterey | <12.2 | 12.2 |
| tvOS | <15.3 | 15.3 |
| Apple iOS, iPadOS, and watchOS | <15.3 | 15.3 |
| Apple iOS, iPadOS, and watchOS | <15.3 | 15.3 |
| Apple iOS, iPadOS, and watchOS | <8.4 | 8.4 |
| Apple iOS, iPadOS, and watchOS | <15.3 | |
| iStyle @cosme iPhone OS | <15.3 | |
| Apple iOS and macOS | <12.2 | |
| tvOS | <15.3 | |
| Apple iOS, iPadOS, and watchOS | <8.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT213053 (Advisory)
- https://support.apple.com/en-us/HT213054 (Advisory)
- https://support.apple.com/en-us/HT213057 (Advisory)
- https://support.apple.com/en-us/HT213059 (Advisory)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2022-22578.
What is the severity level of CVE-2022-22578?
The severity level of CVE-2022-22578 is critical.
Which software versions are affected by CVE-2022-22578?
CVE-2022-22578 affects macOS Monterey 12.2, iOS 15.3, iPadOS 15.3, watchOS 8.4, and tvOS 15.3.
How can a malicious application exploit CVE-2022-22578?
A malicious application can exploit CVE-2022-22578 to gain root privileges.
How can I fix CVE-2022-22578?
To fix CVE-2022-22578, update to the fixed versions: tvOS 15.3, iOS 15.3 and iPadOS 15.3, watchOS 8.4, macOS Monterey 12.2.
- collector/apple-support
- agent/type
- agent/first-publish-date
- agent/references
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/trending
- agent/source
- agent/software-canonical-lookup-request
- agent/author
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- collector/nvd-index
- vendor/apple
- canonical/apple macos monterey
- canonical/tvos
- canonical/apple ios, ipados, and watchos
- canonical/istyle @cosme iphone os
- canonical/apple ios and macos