{"id":"CVE-2022-48618","kind":"vulnerability","aliases":["CVE-2022-48618"],"related":[],"title":"The issue was addressed with improved checks","description":"The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited against versions of iOS released before iOS 15.7.1.","summary":"Apple iOS, iPadOS, macOS, tvOS and watchOS contain a time-of-check/time-of-use memory corruption flaw that lets an attacker with read and write access bypass Pointer Authentication. CISA lists it as actively exploited in the wild.","severity":"high","cvss":7.0,"epss":null,"exploited":true,"exploited_at":"2024-01-31T00:00:00+00:00","products":[{"name":"Apple Multiple Products","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"apple ipados","fixed":["16.2"],"affected":"< 16.2","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["16.2"],"affected":"< 16.2","ecosystem":"vendor"},{"name":"apple macos","fixed":["13.1"],"affected":">= 13.0, < 13.1","ecosystem":"vendor"},{"name":"apple tvos","fixed":["16.2"],"affected":"< 16.2","ecosystem":"vendor"},{"name":"apple watchos","fixed":["9.2"],"affected":"< 9.2","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apple","exploited","ios","ipados","macos","tvos","vendor","watchos"],"not_affected_if":["unknown"],"how_to_check":"Check the device OS version under Settings > General > About (iOS/iPadOS) or Apple menu > About This Mac (macOS) and compare it to Apple's security notes; the sources do not give fixed versions.","fix":"Update Apple devices to the latest OS release per Apple's vendor instructions; CISA says to apply vendor mitigations or discontinue use if none are available.\nThe sources do not name the fixed versions.","status":"open","published_at":"2024-01-09T18:15:45+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T21:02:25+00:00","updated_at":"2026-10-23T22:29:05+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-10-23T21:02:25Z","model":"claude-haiku-5-5","output":{"fix":"Update Apple devices to the latest OS release per Apple's vendor instructions; CISA says to apply vendor mitigations or discontinue use if none are available.\nThe sources do not name the fixed versions.","reach":"local","impact":"high","summary":"Apple iOS, iPadOS, macOS, tvOS and watchOS contain a time-of-check/time-of-use memory corruption flaw that lets an attacker with read and write access bypass Pointer Authentication. CISA lists it as actively exploited in the wild.","category":"vendor","who_cares":["apple","ios","macos","ipados","watchos","tvos"],"confidence":0.5,"needs_auth":"yes","worst_case":"Attacker with prior read and write access bypasses Pointer Authentication hardening.","analyst_note":"Find Apple's security content page for CVE-2022-48618 to get fixed OS versions and the affected product list; sources only cite the CISA KEV entry.","how_to_check":"Check the device OS version under Settings > General > About (iOS/iPadOS) or Apple menu > About This Mac (macOS) and compare it to Apple's security notes; the sources do not give fixed versions.\nunknown\nunknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000523,"input_tokens":2848,"output_tokens":476,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2022':9A,12A '-48618':10A,13A '/time-of-use':49B '13.1':88C '15.7.1':133C '16.2':92C,95C,97C '9.2':90C 'abl':108C 'access':61B 'activ':69B 'address':4A,77C 'appl':28B,36B,113C 'apple':14A,17A,19A,22A,24A,26A 'arbitrari':101C 'attack':56B,99C 'authent':64B,112C 'awar':115C 'bypass':62B,110C 'capabl':105C 'check':7A,48B,80C 'cisa':65B 'contain':43B 'corrupt':51B 'cve':8A,11A 'exploit':29B,70B,125C 'fix':84C 'flaw':52B 'improv':6A,79C 'io':30B,37B,91C,129C,132C 'ipado':31B,38B,94C 'ipados':18A 'iphone':20A 'issu':2A,75C,82C,121C 'let':54B 'list':66B 'maco':32B,39B,86C 'macos':23A 'may':106C,122C 'memori':50B 'multiple':15A 'os':21A 'pointer':63B,111C 'products':16A 'read':58B,102C 'releas':130C 'report':118C 'time':46B 'time-of-check':45B 'tvos':25A,33B,40B,96C 'vendor':34B 'ventura':87C 'version':127C 'watcho':35B,42B,89C 'watchos':27A 'wild':73B 'write':60B,104C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2024-01-09T18:15:45+00:00","kev":{"dateAdded":"2024-01-31","dueDate":"2024-02-21","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2022-48618","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-48618","severity":null,"published_at":"2024-01-31T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T11:39:15+00:00","note":null},{"source":"nvd","external_id":"CVE-2022-48618","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48618","severity":null,"published_at":"2024-01-09T18:15:45+00:00","modified_at":"2026-06-17T05:15:43+00:00","first_seen_at":"2026-10-23T22:29:05+00:00","fetched_at":"2026-10-23T22:29:05+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}