# CVE-2022-46689

A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges.

- Page: https://www.vulneraibility.com/cve/CVE-2022-46689
- CVSS: 7.0
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 48.21% (percentile 98.9)
- Public exploit code: 1 Metasploit module · 13 GitHub proofs of concept (first 2022-12-17)
- CISA SSVC: exploitation none, automatable no, technical impact total (assessed 2025-04-21)
- Weakness: CWE-362
- Published: 2022-12-15

## Affected versions

- Apple macOS: affected < 11.7
- Apple tvOS: affected < 16.2; < 13.1; < 12.6; < 15.7
- Apple watchOS: affected < 9.2

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] https://support.apple.com/en-us/HT213535
- [other] https://support.apple.com/en-us/HT213532
- [other] https://support.apple.com/en-us/HT213530
- [other] https://support.apple.com/en-us/HT213531
- [other] https://support.apple.com/en-us/HT213536
- [other] https://support.apple.com/en-us/HT213534
- [other] https://support.apple.com/en-us/HT213533
- [other] http://seclists.org/fulldisclosure/2022/Dec/20
- [other] http://seclists.org/fulldisclosure/2022/Dec/21
- [other] http://seclists.org/fulldisclosure/2022/Dec/25
- [other] http://seclists.org/fulldisclosure/2022/Dec/23
- [other] http://seclists.org/fulldisclosure/2022/Dec/26
- [other] http://seclists.org/fulldisclosure/2022/Dec/24
- [other] http://seclists.org/fulldisclosure/2022/Dec/27

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.