CVE-2022-42838

An issue with app access to camera data was addressed with improved logic. This issue is fixed in macOS Ventura 13. A camera extension may be able to continue receiving video after the app which activated was closed.

• CWE-672

• https://support.apple.com/en-us/HT213488Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213488Release Notes, Vendor Advisory

Published

Feb 27, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-42831A race condition was addressed with improved locking. This i…6.4
• CVE-2022-42832A race condition was addressed with improved locking. This i…6.4
• CVE-2022-42833An out-of-bounds read was addressed with improved input vali…7.8
• CVE-2022-42834An access issue was addressed with improved access restricti…3.3
• CVE-2022-42835Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-42837An issue existed in the parsing of URLs. This issue was addr…9.8
• CVE-2022-42839This issue was addressed with improved redaction of sensitiv…3.3
• CVE-2022-4284Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-42840The issue was addressed with improved memory handling. This …7.8
• CVE-2022-42841A type confusion issue was addressed with improved checks. T…7.8
• CVE-2022-42842The issue was addressed with improved memory handling. This …9.8
• CVE-2022-42843This issue was addressed with improved data protection. This…5.5