CVEvulnerability
CVE-2022-32949
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-02-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-269
Description
This issue was addressed with improved checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, tvOS 16. An app may be able to execute arbitrary code with kernel privileges.
Affected configurations
• apple ipados (< 15.7.1)
• apple iphone os (< 15.7.1)
• apple tvos (< 16.0)
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- https://support.apple.com/en-us/HT213487 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213490 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213487 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213490 Release Notes, Vendor Advisory