CVE-2022-46710

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Location data may be shared via iCloud links even if Location metadata is disabled via the Share Sheet.
References
Link Resource
https://support.apple.com/en-us/HT213530 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213532 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213530 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213532 Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

21 Nov 2024, 07:30

Type Values Removed Values Added
References () https://support.apple.com/en-us/HT213530 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT213530 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT213532 - Release Notes, Vendor Advisory () https://support.apple.com/en-us/HT213532 - Release Notes, Vendor Advisory

17 Jan 2024, 17:50

Type Values Removed Values Added
CPE cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
First Time Apple iphone Os
Apple macos
Apple ipados
Apple
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
CWE NVD-CWE-noinfo
References () https://support.apple.com/en-us/HT213530 - () https://support.apple.com/en-us/HT213530 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT213532 - () https://support.apple.com/en-us/HT213532 - Release Notes, Vendor Advisory

11 Jan 2024, 13:57

Type Values Removed Values Added
Summary
  • (es) Se solucionó un problema de lógica con controles mejorados. Este problema se solucionó en iOS 16.2 y iPadOS 16.2, macOS Ventura 13.1. Los datos de Location se pueden compartir a través de enlaces de iCloud incluso si los metadatos de Location están deshabilitados a través de Share Sheet.

10 Jan 2024, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-01-10 22:15

Updated : 2024-11-21 07:30


NVD link : CVE-2022-46710

Mitre link : CVE-2022-46710

CVE.ORG link : CVE-2022-46710


JSON object : View

Products Affected

apple

  • iphone_os
  • ipados
  • macos