CVE-2022-46689Ipados Vulnerability
A race condition was addressed with additional validation.
Published Dec 15, 2022 · Updated Apr 21, 2025
Key Facts
Patch immediately- CVE-2022-46689 is a high-severity vulnerability (CVSS 7.0 v3.1) affecting Safari (Apple), Ipados (Apple), Iphone OS (Apple) and 3 more products.
- It is exploited in the wild, listed in Industry KEV feed since Dec 13, 2022. Public exploit code is available.
- EPSS estimates a 48% probability of exploitation in the next 30 days.
- Fixed versions are available, including Ipados 15.7.2, Iphone OS 15.7.2, macOS 11.7.2.
- Brandefense priority: patch immediately, because it is listed as exploited in the wild.
Scores
CVSS v3.1
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS (30-day exploit likelihood)
48%
Higher than 98.8% of all scored CVEs
Exploit maturity
Weaponized
ATLAS score
57/100
Publication score, see How it works
Exploitation Verdict
KEV listed
Dec 13, 2022
Federal due date
None
No federal due date
Ransomware use
Not reported
Attributed actors
None named
Exploit & Defence Guidance
Exploit maturity
Weaponized
Public exploit code
1
Proof-of-concept links
In-the-wild evidence
1
Reports of active use
Advisories And Exploit References
- advisory20221220 APPLE-SA-2022-12-13-1 iOS 16.2 and iPadOS 16.2
- advisory20221220 APPLE-SA-2022-12-13-2 iOS 15.7.2 and iPadOS 15.7.2
- advisory20221220 APPLE-SA-2022-12-13-4 macOS Ventura 13.1
- advisory20221220 APPLE-SA-2022-12-13-5 macOS Monterey 12.6.2
- advisory20221220 APPLE-SA-2022-12-13-6 macOS Big Sur 11.7.2
- advisory20221220 APPLE-SA-2022-12-13-7 tvOS 16.2
Description
A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges.
Known-Exploited Catalog Listings
| Catalog | Added | Remediation due | Ransomware use |
|---|---|---|---|
| Industry KEV feed | Dec 13, 2022 | n/a | Not reported |
Affected Products
9 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| SafariApple | See advisory | 16.2 |
| IpadosApple | See advisory | 15.7.2 |
| Iphone OSApple | See advisory | 15.7.2 |
| macOSApple | >= unspecified | 11.7.2 |
| tvOSApple | >= unspecified | 16.2 |
Patched Releases
Ipados
15.7.2
Iphone OS
15.7.2
macOS
11.7.2, 11.7
Safari
16.2
tvOS
16.2, 12.6, 13.1, 15.7
watchOS
9.2
Timeline
Added to Industry KEV feed
Dec 13, 2022
Publicly disclosed
Dec 15, 2022
Last updated
Apr 21, 2025
Weakness Type
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
References
- advisory20221220 APPLE-SA-2022-12-13-1 iOS 16.2 and iPadOS 16.2
- advisory20221220 APPLE-SA-2022-12-13-2 iOS 15.7.2 and iPadOS 15.7.2
- advisory20221220 APPLE-SA-2022-12-13-4 macOS Ventura 13.1
- advisory20221220 APPLE-SA-2022-12-13-5 macOS Monterey 12.6.2
- advisory20221220 APPLE-SA-2022-12-13-6 macOS Big Sur 11.7.2
FAQ
Common Questions.
A race condition was addressed with additional validation.
Affected: Safari (Apple); Ipados (Apple); Iphone OS (Apple), among others. The full list is in the CVE brief.
It is exploited in the wild, listed in Industry KEV feed since Dec 13, 2022.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including Ipados 15.7.2, Iphone OS 15.7.2, macOS 11.7.2.
Brandefense priority: patch immediately, because it is listed as exploited in the wild.
Is CVE-2022-46689 On Your Attack Surface?
Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.
Request A Demo