QwikSec

Security Database

CVE

CWE

Training

CVE-2022-42855

Published: Dec 15, 2022

Modified: Apr 21, 2025

PUBLISHED

Description

A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2. An app may be able to use arbitrary entitlements.

Vendor	Product	Versions
Apple	tvOS	affected `unspecified - < 16.2`
Apple	tvOS	affected `unspecified - < 13.1`
Apple	tvOS	affected `unspecified - < 12.6`
Apple	tvOS	affected `unspecified - < 16.2`
Apple	tvOS	affected `unspecified - < 15.7`

References

https://support.apple.com/kb/HT213536

https://support.apple.com/en-us/HT213535

https://support.apple.com/en-us/HT213532

https://support.apple.com/en-us/HT213530

https://support.apple.com/en-us/HT213531

https://support.apple.com/en-us/HT213533

20221220 APPLE-SA-2022-12-13-1 iOS 16.2 and iPadOS 16.2

mailing-list

20221220 APPLE-SA-2022-12-13-2 iOS 15.7.2 and iPadOS 15.7.2

mailing-list

20221220 APPLE-SA-2022-12-13-4 macOS Ventura 13.1

mailing-list

20221220 APPLE-SA-2022-12-13-7 tvOS 16.2

mailing-list

20221220 APPLE-SA-2022-12-13-5 macOS Monterey 12.6.2

mailing-list

http://packetstormsecurity.com/files/170518/libCoreEntitlements-CEContextQuery-Arbitrary-Entitlement-Returns.html

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.