High severity7.8NVD Advisory· Published Dec 15, 2022· Updated Jun 17, 2026

CVE-2022-42849

Description

An access issue existed with privileged API calls. This issue was addressed with additional restrictions. This issue is fixed in iOS 16.2 and iPadOS 16.2, tvOS 16.2, watchOS 9.2. A user may be able to elevate privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./tvOSllm-fuzzy2 versions
=16.2+ 1 more
- (no CPE)range: =16.2
- (no CPE)range: unspecified
Apple Inc./Ipadosllm-fuzzy
Range: =16.2
Apple Inc./iOSllm-fuzzy
Range: =16.2
Apple Inc./watchOSv5
Range: unspecified

Patches

Vulnerability mechanics

References

seclists.org/fulldisclosure/2022/Dec/20nvdMailing ListThird Party Advisory
seclists.org/fulldisclosure/2022/Dec/26nvdMailing ListThird Party Advisory
support.apple.com/en-us/HT213530nvdRelease NotesVendor Advisory
support.apple.com/en-us/HT213535nvdRelease NotesVendor Advisory
support.apple.com/en-us/HT213536nvdRelease NotesVendor Advisory
seclists.org/fulldisclosure/2022/Dec/27nvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000