CVE-2022-46689

A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1,…

High7.0EPSS 48.2%

Published: 15 Dec 2022
Updated: 21 Apr 2025
Reserved: 7 Dec 2022
Assigned by: apple

Description

A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges.

Scores

CVSS scores of CVE-2022-46689, by who scored it
Scored by	CVSS	Score	Vector
CISA-ADPADP (enrichment)	3.1	High7.0	CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
NVDNVD · Modified	3.1	High7.0	CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS (exploitation in 30 days): 48.2% · top 1.1% of all CVEs (6 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: no · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.0.

Weakness

An app may be able to execute arbitrary code with kernel privileges
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') (opens in a new tab)All about CWE-362 and its CVEs

Affected products

Apple · macOS
- affected unspecified – < 11.7
Apple · tvOS
- affected unspecified – < 16.2
Apple · tvOS
- affected unspecified – < 13.1
Apple · tvOS
- affected unspecified – < 12.6
Apple · tvOS
- affected unspecified – < 16.2
Apple · tvOS
- affected unspecified – < 15.7
Apple · watchOS
- affected unspecified – < 9.2

References (14)

https://support.apple.com/en-us/HT213535 (opens in a new tab)x_transferred
https://support.apple.com/en-us/HT213532 (opens in a new tab)x_transferred
https://support.apple.com/en-us/HT213530 (opens in a new tab)x_transferred
https://support.apple.com/en-us/HT213531 (opens in a new tab)x_transferred
https://support.apple.com/en-us/HT213536 (opens in a new tab)x_transferred
https://support.apple.com/en-us/HT213534 (opens in a new tab)x_transferred
https://support.apple.com/en-us/HT213533 (opens in a new tab)x_transferred
20221220 APPLE-SA-2022-12-13-1 iOS 16.2 and iPadOS 16.2 (opens in a new tab)mailing-listx_transferred
20221220 APPLE-SA-2022-12-13-2 iOS 15.7.2 and iPadOS 15.7.2 (opens in a new tab)mailing-listx_transferred
20221220 APPLE-SA-2022-12-13-6 macOS Big Sur 11.7.2 (opens in a new tab)mailing-listx_transferred
20221220 APPLE-SA-2022-12-13-4 macOS Ventura 13.1 (opens in a new tab)mailing-listx_transferred
20221220 APPLE-SA-2022-12-13-7 tvOS 16.2 (opens in a new tab)mailing-listx_transferred
20221220 APPLE-SA-2022-12-13-5 macOS Monterey 12.6.2 (opens in a new tab)mailing-listx_transferred
20221220 APPLE-SA-2022-12-13-8 watchOS 9.2 (opens in a new tab)mailing-listx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2022-46689](https://trackcve.app/badge/CVE-2022-46689.svg)](https://trackcve.app/cve/CVE-2022-46689)

Record last updated 21 Apr 2025, 15:21 UTC.