First published: Mon Mar 14 2022(Updated: )
A type confusion issue was addressed with improved state handling. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to execute arbitrary code with kernel privileges.
Credit: Wang Yu cyberserval Pan ZhenPeng @Peterpan0927 Alibaba Security Pandora LabWang Yu Cyberserval Pan ZhenPeng @Peterpan0927 Alibaba Security Pandora Lab product-security@apple.com product-security@apple.com Wang Yu Cyberserval Pan ZhenPeng @Peterpan0927 Alibaba Security Pandora Lab
Affected Software | Affected Version | How to fix |
---|---|---|
Apple macOS Big Sur | <11.6.5 | 11.6.5 |
Apple Catalina | ||
Apple macOS Monterey | <12.3 | 12.3 |
Apple Mac OS X | =10.15.7 | |
Apple Mac OS X | =10.15.7-security_update_2020 | |
Apple Mac OS X | =10.15.7-security_update_2020-001 | |
Apple Mac OS X | =10.15.7-security_update_2020-005 | |
Apple Mac OS X | =10.15.7-security_update_2020-007 | |
Apple Mac OS X | =10.15.7-security_update_2021-001 | |
Apple Mac OS X | =10.15.7-security_update_2021-002 | |
Apple Mac OS X | =10.15.7-security_update_2021-003 | |
Apple Mac OS X | =10.15.7-security_update_2021-004 | |
Apple Mac OS X | =10.15.7-security_update_2021-005 | |
Apple Mac OS X | =10.15.7-security_update_2021-006 | |
Apple Mac OS X | =10.15.7-security_update_2021-007 | |
Apple Mac OS X | =10.15.7-security_update_2021-008 | |
Apple Mac OS X | =10.15.7-security_update_2022-001 | |
Apple Mac OS X | =10.15.7-security_update_2022-002 | |
Apple macOS | >=11.0<11.6.5 | |
Apple macOS | >=12.0.0<12.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2022-46706 is a vulnerability in the Intel Graphics Driver that allows an application to execute arbitrary code with kernel privileges.
CVE-2022-46706 affects macOS Big Sur 11.6.5, macOS Monterey 12.3, and Security Update 2022-003 Catalina.
The severity rating of CVE-2022-46706 is high, with a CVSS score of 7.8.
To fix CVE-2022-46706, update to Security Update 2022-003 Catalina, macOS Monterey 12.3, or macOS Big Sur 11.6.5.
You can find more information about CVE-2022-46706 on the Apple Support website using the following links: [link1](https://support.apple.com/en-us/HT213183), [link2](https://support.apple.com/en-us/HT213184), [link3](https://support.apple.com/en-us/HT213185).