An access issue existed with privileged API calls. This issue was addressed with additional restrictions. This issue is fixed in iOS 16.2 and iPadOS 16.2, tvOS 16.2, watchOS 9.2. A user may be able to elevate privileges.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ipados | Apple | * | 16.2 (excluding) |
| Iphone_os | Apple | * | 16.2 (excluding) |
| Tvos | Apple | * | 16.2 (excluding) |
| Watchos | Apple | * | 9.2 (excluding) |
References
- http://seclists.org/fulldisclosure/2022/Dec/20
- http://seclists.org/fulldisclosure/2022/Dec/26
- http://seclists.org/fulldisclosure/2022/Dec/27
- https://support.apple.com/en-us/HT213530
- https://support.apple.com/en-us/HT213535
- https://support.apple.com/en-us/HT213536
- http://seclists.org/fulldisclosure/2022/Dec/20
- http://seclists.org/fulldisclosure/2022/Dec/26
- http://seclists.org/fulldisclosure/2022/Dec/27
- https://support.apple.com/en-us/HT213530
- https://support.apple.com/en-us/HT213535
- https://support.apple.com/en-us/HT213536