CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Feb 21, 2024

High

CISA KEV

CVE-2022-48618

Apple—Multiple Products

Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a time-of-check/time-of-use (TOCTOU) memory corruption vulnerability that allows an attacker with read and write capabilities to bypass Pointer Authentication.

Required Action

https://support.apple.com/en-us/HT213530, https://support.apple.com/en-us/HT213532, https://support.apple.com/en-us/HT213535, https://support.apple.com/en-us/HT213536; https://nvd.nist.gov/vuln/detail/CVE-2022-48618

Vulnerability Overview

Severity: High
CISA KEV: Yes
Ransomware: Unknown
Published: Jan 31, 2024
KEV Added: Jan 31, 2024
Due Date: Feb 21, 2024
Related Articles: 0

Vendor

Apple

Multiple Products