Exploitation Summary
CVE-2022-42827 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added October 25, 2022.
Description
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..
References (3)
Core 3
Core References
Vendor Advisory
https://support.apple.com/en-us/HT213489
Vendor Advisory
https://support.apple.com/en-us/HT213490
US Government Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-42827
Scores
CVSS v3
7.8
EPSS
0.0017
EPSS Percentile
37.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
active
Automatable
no
Technical Impact
total
Details
CISA KEV
2022-10-25
VulnCheck KEV
2022-10-24
InTheWild.io
2022-10-24
ENISA EUVD
EUVD-2022-45890
CWE
CWE-787
Status
published
Products (2)
apple/ipados
< 15.7.1
apple/iphone_os
< 15.7.1
Published
Nov 01, 2022
KEV Added
Oct 25, 2022
Tracked Since
Feb 18, 2026