CVE-2022-46717 — Apple IOS AND Ipados vulnerability

4 documents3 sources
Severity
2.4LOWNVD
EPSS
0.2%
top 62.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Apple IOS AND IpadosApple IpadosApple Iphone OS+2 more
Timeline
PublishedApr 10

Description

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16.2 and iPadOS 16.2. A user with physical access to a locked Apple Watch may be able to view user photos via accessibility features

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 0.9 | Impact: 1.4

Affected Packages5 packages

▶NVDapple/ipados< 16.2
▶CVEListV5apple/ios_and_ipadosunspecified — 16.2
▶Appleapple/watchos9.2
▶NVDapple/iphone_os< 16.2

🔴Vulnerability Details

1
GHSA
GHSA-37p5-738j-5p3x: A logic issue was addressed with improved restrictions↗2023-04-10
▶

📋Vendor Advisories

2
Apple
CVE-2022-46717: iOS 16.2 and iPadOS 16.2↗2022-12-13
▶
Apple
CVE-2022-46717: watchOS 9.2↗2022-12-13
▶