CVE-2022-48618
KEVApple Multiple Products Memory Corruption Vulnerability
Description
Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a time-of-check/time-of-use (TOCTOU) memory corruption vulnerability that allows an attacker with read and write capabilities to bypass Pointer Authentication.
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited against versions of iOS released before iOS 15.7.1.
CVSS 3.1 vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HPublishedJan 9, 2024
Last modifiedJun 17, 2026
Added to KEVJan 31, 2024
Remediation dueFeb 21, 2024
References
- support.apple.com/en-us/HT213530Release NotesVendor Advisory
- support.apple.com/en-us/HT213532Release NotesVendor Advisory
- support.apple.com/en-us/HT213535Release NotesVendor Advisory
- support.apple.com/en-us/HT213536Release NotesVendor Advisory
- cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-48618US Government Resource
0 recent articles mention this CVE
65
Risk assessment · High
Actively exploited. Patch immediately.
- Exploitation
- Confirmed in the wild (CISA KEV)
- Federal remediation deadline
- Overdue by 979 days
- CVSS
- 7.0 HIGH
- EPSS (30-day exploit probability)
- 0.49% · top 58% of all CVEs
- Weakness
- CWE-367
Recommended actions
- 1.Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- 2.Treat as emergency change: patch or isolate internet-facing instances first.
- 3.Hunt for compromise: review logs for the disclosure window, not just from the patch date.
Assessment is derived automatically from the live signals above; verify against your own asset inventory.