First published: Tue Dec 13 2022(Updated: )
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.1, macOS Big Sur 11.7.2, macOS Monterey 12.6.2. An app may be able to modify protected parts of the file system.
Credit: Mickey Jin @patch1t Offensive SecurityCsaba Fitzl @theevilbit Offensive SecurityMickey Jin @patch1t Csaba Fitzl @theevilbit Offensive SecurityMickey Jin @patch1t Csaba Fitzl @theevilbit Offensive Security product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
<13.1 | 13.1 | |
Apple macOS Monterey | <12.6.2 | 12.6.2 |
Apple macOS Big Sur | <11.7.2 | 11.7.2 |
Apple macOS | >=11.0<11.7.2 | |
Apple macOS | >=12.0.0<12.6.2 | |
Apple macOS | =13.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2022-46704 is a logic issue in PackageKit that was addressed with improved state management.
The affected software includes Apple macOS Ventura up to version 13.1, Apple macOS Big Sur up to version 11.7.2, and Apple macOS Monterey up to version 12.6.2.
The severity of CVE-2022-46704 is not mentioned in the provided information.
To fix CVE-2022-46704, update your operating system to the recommended versions: Apple macOS Ventura 13.1, Apple macOS Big Sur 11.7.2, or Apple macOS Monterey 12.6.2.
More information about CVE-2022-46704 can be found on the Apple support page: [link](https://support.apple.com/en-us/HT213532) [link](https://support.apple.com/en-us/HT213533) [link](https://support.apple.com/en-us/HT213534).