An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, macOS Monterey 12.6. An app may be able to bypass code signing checks.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/HT213443 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/HT213444 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/HT213445 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/HT213446 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/HT213488 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/HT213443 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/HT213444 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/HT213445 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/HT213446 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/HT213488 | Release Notes Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 07:25
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.apple.com/en-us/HT213443 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/HT213444 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/HT213445 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/HT213446 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/HT213488 - Release Notes, Vendor Advisory |
08 Aug 2023, 14:22
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-347 |
Information
Published : 2022-11-01 20:15
Updated : 2024-11-21 07:25
NVD link : CVE-2022-42793
Mitre link : CVE-2022-42793
CVE.ORG link : CVE-2022-42793
JSON object : View
Products Affected
apple
- iphone_os
- macos
- ipados
CWE
CWE-347
Improper Verification of Cryptographic Signature