CVE-2022-22609

HIGH

tvOS-iOS-iPadOS-macOS-watchOS <15.4-<12.3-<8.5 - Info Disclosure

Title source: llm

Description

The issue was addressed with additional permissions checks. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. A malicious application may be able to read other applications' settings.

References (4)

Core 4

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT213182

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT213193

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT213183

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT213186

Scores

CVSS v3 7.5

EPSS 0.0132

EPSS Percentile 67.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

Status published

Products (5)

apple/ipados < 15.4

apple/iphone_os < 15.4

apple/macos 12.0 - 12.3

apple/tvos < 15.4

apple/watchos < 8.5

Published Mar 18, 2022

Tracked Since Feb 18, 2026