CVE-2022-42866
published 2022-12-15CVE-2022-42866: The issue was addressed with improved handling of caches. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. An app…
PriorityP422medium5.5CVSS 3.1
AVLACLPRNUIRSUCHINAN
EPSS
0.34%
26.9th percentile
The issue was addressed with improved handling of caches. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. An app may be able to read sensitive location information.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_16.2_and_ipados | — | — |
| apple | ipados | < 16.2 | 16.2 |
| apple | iphone_os | < 16.2 | 16.2 |
| apple | macos | < 13.1 | 13.1 |
| apple | macos_ventura | — | — |
| apple | tvos | < 16.2 | 16.2 |
| apple | tvos | >= unspecified < 16.2 | 16.2 |
| apple | tvos | >= unspecified < 13.1 | 13.1 |
| apple | tvos16.2 | — | — |
| apple | watchos | < 9.2 | 9.2 |
| apple | watchos | — | — |
| apple | watchos | >= unspecified < 9.2 | 9.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2022-42866: macOS Ventura 13.1
vendor_apple·2022-12-13·CVSS 5.5
CVE-2022-42866 [MEDIUM] CVE-2022-42866: macOS Ventura 13.1
Apple Security Update: About the security content of macOS Ventura 13.1
Product: macOS Ventura
Version: 13.1
CVE: CVE-2022-42866
Component: Weather
Impact: An app may be able to read sensitive location information
Description: The issue was addressed with improved handling of caches.
Apple
CVE-2022-42866: iOS 16.2 and iPadOS 16.2
vendor_apple·2022-12-13·CVSS 5.5
CVE-2022-42866 [MEDIUM] CVE-2022-42866: iOS 16.2 and iPadOS 16.2
Apple Security Update: About the security content of iOS 16.2 and iPadOS 16.2
Product: iOS 16.2 and iPadOS
Version: 16.2
CVE: CVE-2022-42866
Component: Weather
Impact: An app may be able to read sensitive location information
Description: The issue was addressed with improved handling of caches.
Apple
CVE-2022-42866: watchOS 9.2
vendor_apple·2022-12-13·CVSS 5.5
CVE-2022-42866 [MEDIUM] CVE-2022-42866: watchOS 9.2
Apple Security Update: About the security content of watchOS 9.2
Product: watchOS
Version: 9.2
CVE: CVE-2022-42866
Component: Weather
Impact: An app may be able to read sensitive location information
Description: The issue was addressed with improved handling of caches.
Apple
CVE-2022-42866: tvOS16.2
vendor_apple·2022-12-13·CVSS 5.5
CVE-2022-42866 [MEDIUM] CVE-2022-42866: tvOS16.2
Apple Security Update: About the security content of tvOS16.2
Product: tvOS16.2
CVE: CVE-2022-42866
Component: Weather
Impact: An app may be able to read sensitive location information
Description: The issue was addressed with improved handling of caches.
VulDB
Apple macOS up to 13.0 Weather information disclosure (HT213532 / EUVD-2022-45929)
vuldb·2026-08-28·CVSS 5.5
CVE-2022-42866 [MEDIUM] Apple macOS up to 13.0 Weather information disclosure (HT213532 / EUVD-2022-45929)
A vulnerability was found in Apple macOS and classified as problematic. The impacted element is an unknown function of the component Weather. The manipulation results in information disclosure.
This vulnerability is reported as CVE-2022-42866. The attack requires a local approach. No exploit exists.
It is suggested to upgrade the affected component.
VulDB
Apple watchOS up to 9.1 Weather information disclosure (HT213536 / EUVD-2022-45929)
vuldb·2026-08-27·CVSS 5.5
CVE-2022-42866 [MEDIUM] Apple watchOS up to 9.1 Weather information disclosure (HT213536 / EUVD-2022-45929)
A vulnerability described as problematic has been identified in Apple watchOS up to 9.1. Affected by this vulnerability is an unknown functionality of the component Weather. Executing a manipulation can lead to information disclosure.
This vulnerability is registered as CVE-2022-42866. The attack needs to be launched locally. No exploit is available.
Upgrading the affected component is recommended.
VulDB
Apple tvOS up to 16.1.1 Weather information disclosure (HT213535 / EUVD-2022-45929)
vuldb·2026-08-27·CVSS 5.5
CVE-2022-42866 [MEDIUM] Apple tvOS up to 16.1.1 Weather information disclosure (HT213535 / EUVD-2022-45929)
A vulnerability marked as problematic has been reported in Apple tvOS up to 16.1.1. Impacted is an unknown function of the component Weather. This manipulation causes information disclosure.
This vulnerability is tracked as CVE-2022-42866. The attack is restricted to local execution. No exploit exists.
It is suggested to upgrade the affected component.
VulDB
Apple iOS/iPadOS up to 16.1.2 Weather information disclosure (HT213530 / EUVD-2022-45929)
vuldb·2026-08-27·CVSS 5.5
CVE-2022-42866 [MEDIUM] Apple iOS/iPadOS up to 16.1.2 Weather information disclosure (HT213530 / EUVD-2022-45929)
A vulnerability, which was classified as problematic, has been found in Apple iOS and iPadOS up to 16.1.2. This affects an unknown function of the component Weather. Performing a manipulation results in information disclosure.
This vulnerability is known as CVE-2022-42866. Attacking locally is a requirement. No exploit is available.
It is advisable to upgrade the affected component.
GHSA
GHSA-xc3v-8w4w-w63x: The issue was addressed with improved handling of caches
ghsa_unreviewed·2022-12-15
CVE-2022-42866 [MEDIUM] CWE-200 GHSA-xc3v-8w4w-w63x: The issue was addressed with improved handling of caches
The issue was addressed with improved handling of caches. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. An app may be able to read sensitive location information.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://seclists.org/fulldisclosure/2022/Dec/20http://seclists.org/fulldisclosure/2022/Dec/23http://seclists.org/fulldisclosure/2022/Dec/26http://seclists.org/fulldisclosure/2022/Dec/27https://support.apple.com/en-us/HT213530https://support.apple.com/en-us/HT213532https://support.apple.com/en-us/HT213535https://support.apple.com/en-us/HT213536http://seclists.org/fulldisclosure/2022/Dec/20http://seclists.org/fulldisclosure/2022/Dec/23http://seclists.org/fulldisclosure/2022/Dec/26http://seclists.org/fulldisclosure/2022/Dec/27https://support.apple.com/en-us/HT213530https://support.apple.com/en-us/HT213532https://support.apple.com/en-us/HT213535https://support.apple.com/en-us/HT213536
2022-12-15
Published