Kritisk sårbarhet i macOS, iOS og iPadOS

En kritisk sårbarhet som tillater en ondsinnet aktør å kjøre kode med kernel-privileger har blitt patchet i macOS, iOS, og iPadOS. Sårbarheten blir aktivt utnyttet.

Det er i tillegg en mindre alvorlig sårbarhet for macOS som kan gjøre det enklere å utnytte andre sårbarheter.

AppleAVD (CVE-2022-22675) - Kritisk

An out-of-bounds write issue was addressed with improved bounds checking. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.

Intel Graphics Driver (CVE-2022-22674)

An out-of-bounds read issue may lead to the disclosure of kernel memory and was addressed with improved input validation. Apple is aware of a report that this issue may have been actively exploited. An application may be able to read kernel memory

Kilder

• https://support.apple.com/en-us/HT201222
• https://isc.sans.edu/diary/rss/28506