{"id":"CVE-2022-42861","state":"PUBLISHED","title":"This issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2. An app may ","description":"This issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2. An app may be able to break out of its sandbox.","publishedAt":"2022-12-15T00:00:00.000Z","updatedAt":"2025-04-21T15:14:48.760Z","severity":{"score":8.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"apple","products":["Apple macOS"],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"13.1","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"12.6","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16.2","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"15.7","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/HT213532","https://support.apple.com/en-us/HT213530","https://support.apple.com/en-us/HT213531","https://support.apple.com/en-us/HT213533","http://seclists.org/fulldisclosure/2022/Dec/20","http://seclists.org/fulldisclosure/2022/Dec/21","http://seclists.org/fulldisclosure/2022/Dec/23","http://seclists.org/fulldisclosure/2022/Dec/24"],"weaknesses":["CWE-284"],"ingestedAt":"2026-10-29T19:50:40.706Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/42xxx/CVE-2022-42861.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-42861","state":"PUBLISHED","datePublished":"2022-12-15T00:00:00.000Z","dateUpdated":"2025-04-21T15:14:48.760Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2022-10-11T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"This issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2. An app may be able to break out of its sandbox."}],"affected":[{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"13.1","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"12.6","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16.2","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"15.7","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/HT213532"},{"url":"https://support.apple.com/en-us/HT213530"},{"url":"https://support.apple.com/en-us/HT213531"},{"url":"https://support.apple.com/en-us/HT213533"},{"url":"http://seclists.org/fulldisclosure/2022/Dec/20","name":"20221220 APPLE-SA-2022-12-13-1 iOS 16.2 and iPadOS 16.2","tags":["mailing-list"]},{"url":"http://seclists.org/fulldisclosure/2022/Dec/21","name":"20221220 APPLE-SA-2022-12-13-2 iOS 15.7.2 and iPadOS 15.7.2","tags":["mailing-list"]},{"url":"http://seclists.org/fulldisclosure/2022/Dec/23","name":"20221220 APPLE-SA-2022-12-13-4 macOS Ventura 13.1","tags":["mailing-list"]},{"url":"http://seclists.org/fulldisclosure/2022/Dec/24","name":"20221220 APPLE-SA-2022-12-13-5 macOS Monterey 12.6.2","tags":["mailing-list"]}],"problemTypes":[{"descriptions":[{"type":"text","lang":"en","description":"An app may be able to break out of its sandbox"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2022-12-21T00:00:00.000Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.apple.com/en-us/HT213532","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213530","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213531","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213533","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2022/Dec/20","name":"20221220 APPLE-SA-2022-12-13-1 iOS 16.2 and iPadOS 16.2","tags":["mailing-list","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2022/Dec/21","name":"20221220 APPLE-SA-2022-12-13-2 iOS 15.7.2 and iPadOS 15.7.2","tags":["mailing-list","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2022/Dec/23","name":"20221220 APPLE-SA-2022-12-13-4 macOS Ventura 13.1","tags":["mailing-list","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2022/Dec/24","name":"20221220 APPLE-SA-2022-12-13-5 macOS Monterey 12.6.2","tags":["mailing-list","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T13:19:05.401Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":8.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-04-21T15:13:22.546040Z","id":"CVE-2022-42861","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-284","type":"CWE","lang":"en","description":"CWE-284 Improper Access Control"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-21T15:14:48.760Z"}}]}}}