Apple Ios 16.2 And Ipados vulnerabilities

49 known vulnerabilities affecting apple/ios_16.2_and_ipados.

Total CVEs
49
CISA KEV
2
actively exploited
Public exploits
1
Exploited in wild
2
Severity breakdown
CRITICAL2HIGH25MEDIUM20LOW2

Vulnerabilities

Page 1 of 3
CVE-2022-42842CRITICALCVSS 9.8v16.22022-12-13
CVE-2022-42842 [CRITICAL] CVE-2022-42842: iOS 16.2 and iPadOS 16.2 Apple Security Update: About the security content of iOS 16.2 and iPadOS 16.2 Product: iOS 16.2 and iPadOS Version: 16.2 CVE: CVE-2022-42842 Component: Kernel Impact: A remote user may be able to cause kernel code execution Description: The issue was addressed with improved memory handling.
apple
CVE-2022-42837CRITICALCVSS 9.8v16.22022-12-13
CVE-2022-42837 [CRITICAL] CVE-2022-42837: iOS 16.2 and iPadOS 16.2 Apple Security Update: About the security content of iOS 16.2 and iPadOS 16.2 Product: iOS 16.2 and iPadOS Version: 16.2 CVE: CVE-2022-42837 Component: IOMobileFrameBuffer Impact: An app may be able to execute arbitrary code with kernel privileges Description: An out-of-bounds write issue was addressed with improved input validation.
apple
CVE-2022-42856HIGHCVSS 8.8KEVv16.22022-12-13
CVE-2022-42856 [HIGH] CVE-2022-42856: iOS 16.2 and iPadOS 16.2 Apple Security Update: About the security content of iOS 16.2 and iPadOS 16.2 Product: iOS 16.2 and iPadOS Version: 16.2 CVE: CVE-2022-42856 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.1. Description: A type confusion issue was addressed with improved
apple
CVE-2022-42848HIGHCVSS 7.8v16.22022-12-13
CVE-2022-42848 [HIGH] CVE-2022-42848: iOS 16.2 and iPadOS 16.2 Apple Security Update: About the security content of iOS 16.2 and iPadOS 16.2 Product: iOS 16.2 and iPadOS Version: 16.2 CVE: CVE-2022-42848 Component: AVEVideoEncoder Impact: An app may be able to execute arbitrary code with kernel privileges Description: A logic issue was addressed with improved checks.
apple
CVE-2022-46690HIGHCVSS 7.8v16.22022-12-13
CVE-2022-46690 [HIGH] CVE-2022-46690: iOS 16.2 and iPadOS 16.2 Apple Security Update: About the security content of iOS 16.2 and iPadOS 16.2 Product: iOS 16.2 and iPadOS Version: 16.2 CVE: CVE-2022-46690 Component: IOMobileFrameBuffer Impact: An app may be able to execute arbitrary code with kernel privileges Description: An out-of-bounds write issue was addressed with improved input validation.
apple
CVE-2022-42864HIGHCVSS 7.0v16.22022-12-13
CVE-2022-42864 [HIGH] CVE-2022-42864: iOS 16.2 and iPadOS 16.2 Apple Security Update: About the security content of iOS 16.2 and iPadOS 16.2 Product: iOS 16.2 and iPadOS Version: 16.2 CVE: CVE-2022-42864 Component: IOHIDFamily Impact: An app may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with improved state handling.
apple
CVE-2022-42844HIGHCVSS 8.6v16.22022-12-13
CVE-2022-42844 [HIGH] CVE-2022-42844: iOS 16.2 and iPadOS 16.2 Apple Security Update: About the security content of iOS 16.2 and iPadOS 16.2 Product: iOS 16.2 and iPadOS Version: 16.2 CVE: CVE-2022-42844 Component: Kernel Impact: An app may be able to break out of its sandbox Description: The issue was addressed with improved memory handling.
apple
CVE-2022-42855HIGHCVSS 7.1v16.22022-12-13
CVE-2022-42855 [HIGH] CVE-2022-42855: iOS 16.2 and iPadOS 16.2 Apple Security Update: About the security content of iOS 16.2 and iPadOS 16.2 Product: iOS 16.2 and iPadOS Version: 16.2 CVE: CVE-2022-42855 Component: Preferences Impact: An app may be able to use arbitrary entitlements Description: A logic issue was addressed with improved state management.
apple
CVE-2022-43454HIGHCVSS 7.8v16.22022-12-13
CVE-2022-43454 [HIGH] CVE-2022-43454: iOS 16.2 and iPadOS 16.2 Apple Security Update: About the security content of iOS 16.2 and iPadOS 16.2 Product: iOS 16.2 and iPadOS Version: 16.2 CVE: CVE-2022-43454 Component: Kernel Impact: An app may be able to execute arbitrary code with kernel privileges Description: A double free issue was addressed with improved memory management.
apple
CVE-2022-46699HIGHCVSS 8.8v16.22022-12-13
CVE-2022-46699 [HIGH] CVE-2022-46699: iOS 16.2 and iPadOS 16.2 Apple Security Update: About the security content of iOS 16.2 and iPadOS 16.2 Product: iOS 16.2 and iPadOS Version: 16.2 CVE: CVE-2022-46699 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved state management.
apple
CVE-2022-42861HIGHCVSS 8.8v16.22022-12-13
CVE-2022-42861 [HIGH] CVE-2022-42861: iOS 16.2 and iPadOS 16.2 Apple Security Update: About the security content of iOS 16.2 and iPadOS 16.2 Product: iOS 16.2 and iPadOS Version: 16.2 CVE: CVE-2022-42861 Component: Kernel Impact: An app may be able to break out of its sandbox Description: This issue was addressed with improved checks.
apple
CVE-2022-46701HIGHCVSS 7.8v16.22022-12-13
CVE-2022-46701 [HIGH] CVE-2022-46701: iOS 16.2 and iPadOS 16.2 Apple Security Update: About the security content of iOS 16.2 and iPadOS 16.2 Product: iOS 16.2 and iPadOS Version: 16.2 CVE: CVE-2022-46701 Component: Kernel Impact: Connecting to a malicious NFS server may lead to arbitrary code execution with kernel privileges Description: The issue was addressed with improved bounds checks.
apple
CVE-2022-46691HIGHCVSS 8.8v16.22022-12-13
CVE-2022-46691 [HIGH] CVE-2022-46691: iOS 16.2 and iPadOS 16.2 Apple Security Update: About the security content of iOS 16.2 and iPadOS 16.2 Product: iOS 16.2 and iPadOS Version: 16.2 CVE: CVE-2022-46691 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A memory consumption issue was addressed with improved memory handling.
apple
CVE-2022-46700HIGHCVSS 8.8v16.22022-12-13
CVE-2022-46700 [HIGH] CVE-2022-46700: iOS 16.2 and iPadOS 16.2 Apple Security Update: About the security content of iOS 16.2 and iPadOS 16.2 Product: iOS 16.2 and iPadOS Version: 16.2 CVE: CVE-2022-46700 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved input validation.
apple
CVE-2022-46693HIGHCVSS 7.8v16.22022-12-13
CVE-2022-46693 [HIGH] CVE-2022-46693: iOS 16.2 and iPadOS 16.2 Apple Security Update: About the security content of iOS 16.2 and iPadOS 16.2 Product: iOS 16.2 and iPadOS Version: 16.2 CVE: CVE-2022-46693 Component: ImageIO Impact: Processing a maliciously crafted file may lead to arbitrary code execution Description: An out-of-bounds write issue was addressed with improved input validation.
apple
CVE-2022-42849HIGHCVSS 7.8v16.22022-12-13
CVE-2022-42849 [HIGH] CVE-2022-42849: iOS 16.2 and iPadOS 16.2 Apple Security Update: About the security content of iOS 16.2 and iPadOS 16.2 Product: iOS 16.2 and iPadOS Version: 16.2 CVE: CVE-2022-42849 Component: Software Update Impact: A user may be able to elevate privileges Description: An access issue existed with privileged API calls. This issue was addressed with additional restrictions.
apple
CVE-2022-46720HIGHCVSS 8.6v16.22022-12-13
CVE-2022-46720 [HIGH] CVE-2022-46720: iOS 16.2 and iPadOS 16.2 Apple Security Update: About the security content of iOS 16.2 and iPadOS 16.2 Product: iOS 16.2 and iPadOS Version: 16.2 CVE: CVE-2022-46720 Component: CoreServices Impact: An app may be able to bypass Privacy preferences Description: Multiple issues were addressed by removing the vulnerable code.
apple
CVE-2022-46696HIGHCVSS 8.8v16.22022-12-13
CVE-2022-46696 [HIGH] CVE-2022-46696: iOS 16.2 and iPadOS 16.2 Apple Security Update: About the security content of iOS 16.2 and iPadOS 16.2 Product: iOS 16.2 and iPadOS Version: 16.2 CVE: CVE-2022-46696 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved input validation.
apple
CVE-2022-42867HIGHCVSS 8.8v16.22022-12-13
CVE-2022-42867 [HIGH] CVE-2022-42867: iOS 16.2 and iPadOS 16.2 Apple Security Update: About the security content of iOS 16.2 and iPadOS 16.2 Product: iOS 16.2 and iPadOS Version: 16.2 CVE: CVE-2022-42867 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A use after free issue was addressed with improved memory management.
apple
CVE-2022-42850HIGHCVSS 7.8v16.22022-12-13
CVE-2022-42850 [HIGH] CVE-2022-42850: iOS 16.2 and iPadOS 16.2 Apple Security Update: About the security content of iOS 16.2 and iPadOS 16.2 Product: iOS 16.2 and iPadOS Version: 16.2 CVE: CVE-2022-42850 Component: Graphics Driver Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.
apple