{"id":"CVE-2022-46689","published":"2022-12-15T00:00:00Z","modified":"2025-04-21T15:21:15Z","title":"A race condition was addressed with additional validation","vendor":"Apple","product":"macOS","tier":"core","eol":null,"affectedVersions":[{"vendor":"Apple","product":"macOS","versions":[">= unspecified, < 11.7"]},{"vendor":"Apple","product":"tvOS","versions":[">= unspecified, < 16.2"]},{"vendor":"Apple","product":"tvOS","versions":[">= unspecified, < 13.1"]},{"vendor":"Apple","product":"tvOS","versions":[">= unspecified, < 12.6"]},{"vendor":"Apple","product":"tvOS","versions":[">= unspecified, < 16.2"]},{"vendor":"Apple","product":"tvOS","versions":[">= unspecified, < 15.7"]},{"vendor":"Apple","product":"watchOS","versions":[">= unspecified, < 9.2"]}],"description":{"text":"A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges.","provenance":"source","from":"CVE.org"},"summary":{"text":"A race condition in Apple's macOS, addressed with additional validation, affects the kernel and is fixed in macOS Monterey 12.6.2, Ventura 13.1 and Big Sur 11.7.2. An attacker who can run a malicious app locally, with no authentication needed but requiring a user to interact with it, and with the attack conditions being a timing-dependent race that is difficult to trigger, could execute arbitrary code with kernel privileges.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-31T12:59:55Z"},"cvss":{"score":7,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.48213,"percentile":0.98861,"date":"2026-10-30","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2022-12-13","exploitedFirstSeen":"2022-12-13","ransomware":false,"evidence":[{"url":"https://support.apple.com/kb/HT213531","date":"2022-12-13"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":3,"pulses":[{"name":"CVE Data","url":"https://otx.alienvault.com/pulse/69929b597293fe5837b9c95c","created":"2026-02-16"},{"name":"Thor Lite Scanner - Cigabuntu (Parrot Version) vs. The Book of Shadows","url":"https://otx.alienvault.com/pulse/666ac558d08da6cfb3ba135b","created":"2024-06-13"},{"name":"Thor-Lite Linux 64 (06.11.24) - enriched a bit more but not 'pruned'","url":"https://otx.alienvault.com/pulse/6668b85065eec626e4766a38","created":"2024-06-11"}],"provenance":"machine"},"cwes":[{"id":"CWE-362","name":"Concurrent Execution using Shared Resource with Improper Synchronization"}],"references":[{"url":"https://support.apple.com/en-us/HT213535","tags":[]},{"url":"https://support.apple.com/en-us/HT213532","tags":[]},{"url":"https://support.apple.com/en-us/HT213530","tags":[]},{"url":"https://support.apple.com/en-us/HT213531","tags":[]},{"url":"https://support.apple.com/en-us/HT213536","tags":[]},{"url":"https://support.apple.com/en-us/HT213534","tags":[]},{"url":"https://support.apple.com/en-us/HT213533","tags":[]},{"url":"http://seclists.org/fulldisclosure/2022/Dec/20","tags":["mailing-list"]},{"url":"http://seclists.org/fulldisclosure/2022/Dec/21","tags":["mailing-list"]},{"url":"http://seclists.org/fulldisclosure/2022/Dec/25","tags":["mailing-list"]},{"url":"http://seclists.org/fulldisclosure/2022/Dec/23","tags":["mailing-list"]},{"url":"http://seclists.org/fulldisclosure/2022/Dec/26","tags":["mailing-list"]},{"url":"http://seclists.org/fulldisclosure/2022/Dec/24","tags":["mailing-list"]},{"url":"http://seclists.org/fulldisclosure/2022/Dec/27","tags":["mailing-list"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2022-49478","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-49478","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":13,"skipped":0,"earliest":"2022-12-17","earliestUrl":"https://github.com/zhuowei/MacDirtyCowDemo","repos":[{"name":"ginsudev/WDBFontOverwrite","url":"https://github.com/ginsudev/WDBFontOverwrite","stars":883,"created":"2022-12-26"},{"name":"zhuowei/MacDirtyCowDemo","url":"https://github.com/zhuowei/MacDirtyCowDemo","stars":411,"created":"2022-12-17"},{"name":"straight-tamago/FileSwitcherX","url":"https://github.com/straight-tamago/FileSwitcherX","stars":150,"created":"2023-01-05"},{"name":"straight-tamago/NoCameraSound","url":"https://github.com/straight-tamago/NoCameraSound","stars":128,"created":"2022-12-26"},{"name":"mineek/FileManager","url":"https://github.com/mineek/FileManager","stars":80,"created":"2022-12-28"}]},"metasploit":[{"name":"macOS Dirty Cow Arbitrary File Write Local Privilege Escalation","module":"exploit/osx/local/mac_dirty_cow","type":"exploit","disclosureDate":"2022-12-17","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/mac_dirty_cow.rb"}],"first":{"date":"2022-12-17","source":"PoC-in-GitHub","url":"https://github.com/zhuowei/MacDirtyCowDemo"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2022-12-13","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://support.apple.com/kb/HT213531","provenance":"source"},{"date":"2022-12-15","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2022-46689","provenance":"source"},{"date":"2022-12-17","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub; later: Metasploit 2022-12-17","url":"https://github.com/zhuowei/MacDirtyCowDemo","provenance":"source"}],"speed":{"daysToPublicExploit":2,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":66.0,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1418 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.77,"detail":"percentile 0.9886"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"13 PoC-in-GitHub repos; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":1.37,"detail":"3 pulses"},{"name":"CVSS severity","points":4.9,"detail":"base score 7"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"familyId":"fam-class-apple-ios-macos-cwe-362"}}