7.8 High Exploited

CVE-2022-32917 Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability

Active exploitation observed

· CISA KEV catalogue

Required action Apply updates per vendor instructions.

Ransomware campaigns Not observed so far

Weakness CWE-787, CWE-20

Description

The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

Affected products and versions

Product	Affected versions	Fixed in
iOS 16	earliest → < 16	16
macOS 12.6	earliest → < 12.6	12.6

References

support.apple.com support.apple.com
support.apple.com support.apple.com
support.apple.com support.apple.com
support.apple.com support.apple.com
20221030 APPLE-SA-2022-10-27-3 Additional information for APPLE-SA-2022-09-12-1 iOS 16 seclists.org
20221030 APPLE-SA-2022-10-27-4 Additional information for APPLE-SA-2022-09-12-2 iOS 15.7 and iPadOS 15.7 seclists.org
20221030 APPLE-SA-2022-10-27-7 Additional information for APPLE-SA-2022-09-12-4 macOS Monterey 12.6 seclists.org
20221030 APPLE-SA-2022-10-27-9 Additional information for APPLE-SA-2022-09-12-3 macOS Big Sur 11.7 seclists.org

Timeline

Published September 20, 2022
Added to the KEV catalogue September 14, 2022
Last modified October 21, 2025

The 507 CVEs of iOS →

CVE-2024-44229 An information leakage was addressed with additional validation 5.3 Medium CVE-2024-44218 This issue was addressed with improved checks 7.8 High CVE-2024-40867 A custom URL scheme handling issue was addressed with improved input validation 8.8 High CVE-2024-44259 This issue was addressed through improved state management 8.8 High

Track this CVE