VulnerabilityModified
CVE-2022-32819
A logic issue was addressed with improved state management.
HIGH 7.8EPSS 0.35%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.35%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A logic issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to gain root privileges.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 0.35% probability · 28th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-269
- Affected
- apple/ipados · apple/iphone os · apple/mac os x · apple/macos · apple/tvos · apple/watchos
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/HT213340Vendor Advisory
- https://support.apple.com/en-us/HT213342Vendor Advisory
- https://support.apple.com/en-us/HT213343Vendor Advisory
- https://support.apple.com/en-us/HT213344Vendor Advisory
- https://support.apple.com/en-us/HT213345Vendor Advisory
- https://support.apple.com/en-us/HT213346Vendor Advisory
- https://support.apple.com/en-us/HT213340Vendor Advisory
- https://support.apple.com/en-us/HT213342Vendor Advisory
- https://support.apple.com/en-us/HT213343Vendor Advisory
- https://support.apple.com/en-us/HT213344Vendor Advisory
- https://support.apple.com/en-us/HT213345Vendor Advisory
- https://support.apple.com/en-us/HT213346Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.