CVE-2022-22670

LOW

iPadOS < 15.4 - Unprotected User Data Exposure via Installed Application Enumeration

Title source: llm

Description

An access issue was addressed with improved access restrictions. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, watchOS 8.5. A malicious application may be able to identify what other applications a user has installed.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT213182

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT213193

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT213186

Scores

CVSS v3 3.3

EPSS 0.0068

EPSS Percentile 48.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Details

Status published

Products (4)

apple/ipados < 15.4

apple/iphone_os < 15.4

apple/tvos < 15.4

apple/watchos < 8.5

Published Mar 18, 2022

Tracked Since Feb 18, 2026