Medium severity5.5NVD Advisory· Published Dec 15, 2022· Updated Jun 17, 2026

CVE-2022-42859

Description

Multiple issues were addressed by removing the vulnerable code. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, watchOS 9.2. An app may be able to bypass Privacy preferences.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./Ipadosllm-fuzzy
Range: <16.2
Apple Inc./watchOSllm-fuzzy2 versions
<9.2+ 1 more
- (no CPE)range: <9.2
- (no CPE)range: unspecified
Apple Inc./macOS Venturallm-fuzzy
Range: <13.1
Apple Inc./iOSllm-fuzzy
Range: <16.2
Apple Inc./macOSv5
Range: unspecified

Patches

Vulnerability mechanics

References

seclists.org/fulldisclosure/2022/Dec/20nvdMailing ListThird Party Advisory
seclists.org/fulldisclosure/2022/Dec/23nvdMailing ListThird Party Advisory
support.apple.com/en-us/HT213530nvdRelease NotesVendor Advisory
support.apple.com/en-us/HT213532nvdRelease NotesVendor Advisory
support.apple.com/en-us/HT213536nvdRelease NotesVendor Advisory
seclists.org/fulldisclosure/2022/Dec/27nvd

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000