ByteOS Network

NVD Vulnerability Details :

CVE-2022-42797

Analyzed

Source-product-security@apple.com

Published At-27 Feb, 2023 | 20:15

Updated At-07 Mar, 2023 | 21:39

An injection issue was addressed with improved input validation. This issue is fixed in Xcode 14.1. An app may be able to gain root privileges.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

>>xcode>>Versions before 14.1(exclusive)

CWE ID	Type	Source
CWE-74	Primary	nvd@nist.gov

CWE ID: CWE-74

Type: Primary

Source: nvd@nist.gov

Hyperlink	Source	Resource
https://support.apple.com/en-us/HT213496	product-security@apple.com	Release Notes Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT213496

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory