CVE-2022-26760

CRITICAL

iPadOS < 15.5 - Privilege Escalation via Memory Corruption

Title source: llm

Description

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 15.5 and iPadOS 15.5. A malicious application may be able to elevate privileges.

References (1)

Core 1

Core References

Release Notes, Vendor Advisory

https://support.apple.com/en-us/HT213258

Scores

CVSS v3 9.8

EPSS 0.0050

EPSS Percentile 66.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-787

Status published

Products (2)

apple/ipados < 15.5

apple/iphone_os < 15.5

Published Feb 27, 2023

Tracked Since Feb 18, 2026