CVE-2022-22639

HIGH

iOS <15.4 - Privilege Escalation

Title source: llm
STIX 2.1

Description

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. An application may be able to gain elevated privileges.

Exploits (1)

nomisec WORKING POC 122 stars
by jhftss · poc
https://github.com/jhftss/CVE-2022-22639

References (2)

Core 2
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213182
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213183

Scores

CVSS v3 7.8
EPSS 0.0768
EPSS Percentile 92.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

Status published
Products (3)
apple/ipados < 15.4
apple/iphone_os < 15.4
apple/macos < 12.3
Published Mar 18, 2022
Tracked Since Feb 18, 2026