CVE-2022-46706

Description

A type confusion issue was addressed with improved state handling. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to execute arbitrary code with kernel privileges.

Affected products

• Apple / macOSunspecified – 12.3
• Apple / macOSunspecified – 11.6
• Apple / Security Update - Catalinaunspecified – 2022

References

• VENDOR_ADVISORYhttps://support.apple.com/en-us/HT213183
• VENDOR_ADVISORYhttps://support.apple.com/en-us/HT213185
• VENDOR_ADVISORYhttps://support.apple.com/en-us/HT213184