CVE-2022-22655

MEDIUM

iPadOS 15.0-15.4 - Unprotected User Data Exposure via Sandbox Bypass

Title source: llm

Description

An access issue was addressed with improvements to the sandbox. This issue is fixed in macOS Monterey 12.3, iOS 15.4 and iPadOS 15.4. An app may be able to leak sensitive user information.

References (2)

Core 2

Core References

Release Notes, Vendor Advisory

https://support.apple.com/en-us/HT213182

Release Notes, Vendor Advisory

https://support.apple.com/en-us/HT213183

Scores

CVSS v3 5.5

EPSS 0.0008

EPSS Percentile 23.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (3)

apple/ipados 15.0 - 15.4

apple/iphone_os 15.0 - 15.4

apple/macos 12.0.0 - 12.3

Published Aug 14, 2023

Tracked Since Feb 18, 2026