7.8 Élevée Exploitée

CVE-2022-32917 Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability

Exploitation active constatée

· catalogue CISA KEV

Action attendue Apply updates per vendor instructions.

Campagnes de rançongiciel Non constatée à ce jour

Faiblesse CWE-787, CWE-20

Description

The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

Produits et versions touchés

Produit	Versions touchées	Corrigé en
iOS 16	premières → < 16	16
macOS 12.6	premières → < 12.6	12.6

Références

support.apple.com support.apple.com
support.apple.com support.apple.com
support.apple.com support.apple.com
support.apple.com support.apple.com
20221030 APPLE-SA-2022-10-27-3 Additional information for APPLE-SA-2022-09-12-1 iOS 16 seclists.org
20221030 APPLE-SA-2022-10-27-4 Additional information for APPLE-SA-2022-09-12-2 iOS 15.7 and iPadOS 15.7 seclists.org
20221030 APPLE-SA-2022-10-27-7 Additional information for APPLE-SA-2022-09-12-4 macOS Monterey 12.6 seclists.org
20221030 APPLE-SA-2022-10-27-9 Additional information for APPLE-SA-2022-09-12-3 macOS Big Sur 11.7 seclists.org

Chronologie

Publiée 20 septembre 2022
Ajoutée au catalogue KEV 14 septembre 2022
Dernière modification 21 octobre 2025

Les 507 CVE de iOS →

CVE-2024-44229 An information leakage was addressed with additional validation 5.3 Moyenne CVE-2024-44218 This issue was addressed with improved checks 7.8 Élevée CVE-2024-40867 A custom URL scheme handling issue was addressed with improved input validation 8.8 Élevée CVE-2024-44259 This issue was addressed through improved state management 8.8 Élevée

Suivre cette CVE