CVE-2022-32845

CRITICAL

iPadOS < 15.6 - Sandbox Escape via Protection Mechanism Failure

Title source: llm

Description

This issue was addressed with improved checks. This issue is fixed in watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to break out of its sandbox.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT213345

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT213340

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT213346

Scores

CVSS v3 10.0

EPSS 0.0068

EPSS Percentile 71.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-693

Status published

Products (4)

apple/ipados < 15.6

apple/iphone_os < 15.6

apple/macos 12.0 - 12.5

apple/watchos < 8.7

Published Sep 23, 2022

Tracked Since Feb 18, 2026