CVE-2022-22587

CRITICAL KEV

iOS <15.3 - Memory Corruption

Title source: llm

Description

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3, macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

References (4)

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/HT213053

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/HT213054

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/HT213055

[Third Party Advisory, US Government Resource] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22587

Scores

CVSS v3 9.8

EPSS 0.0041

EPSS Percentile 61.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CISA KEV 2022-01-28

VulnCheck KEV 2022-01-26

InTheWild.io 2022-01-26

ENISA EUVD EUVD-2022-27732

CWE

CWE-787

Status published

Products (3)

apple/ipados < 15.3

apple/iphone_os < 15.3

apple/macos < 11.6.3

Published Mar 18, 2022

KEV Added Jan 28, 2022

Tracked Since Feb 18, 2026