CVE-2022-42849

Description

An access issue existed with privileged API calls. This issue was addressed with additional restrictions. This issue is fixed in iOS 16.2 and iPadOS 16.2, tvOS 16.2, watchOS 9.2. A user may be able to elevate privileges.

Affected Platforms

Weakness Type

NVD-CWE-noinfo, CWE-269

References

• http://seclists.org/fulldisclosure/2022/Dec/20
• http://seclists.org/fulldisclosure/2022/Dec/26
• http://seclists.org/fulldisclosure/2022/Dec/27
• https://support.apple.com/en-us/HT213530
• https://support.apple.com/en-us/HT213535
• https://support.apple.com/en-us/HT213536