NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2022-32946

CVSS 3.1: 5.5 medium
EPSS: <1%p16
Published: Nov 1, 2022 · Nov 1, 2022
Modified: Jun 17, 2026

Analyze CVE-2022-32946 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

This issue was addressed with improved entitlements. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to record audio using a pair of connected AirPods.

Vendors: apple

Products: ipados, iphone os

Weakness: CWE-284

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

4 stories

Apple fixes exploited iOS, iPadOS zero-day (CVE-2022-42827)

Help Net SecurityOct 28, 09:20 UTC · Oct 28, 2022Exploit / PoCExploitedCVE-2022-42827 CVE-2022-329463

60

Apple iOS and macOS Flaw Could've Let Apps Eavesdrop on Your Conversations with Siri

The Hacker NewsOct 28, 07:14 UTC · Oct 28, 2022Exploit / PoCExploitedCVE-2022-32946 CVE-2022-428273 · 2 reads

60

iOS Bluetooth Bug Allowed Apps to Eavesdrop on User Conversations

Infosecurity MagazineOct 27, 17:00 UTC · Oct 27, 2022VulnerabilityCVE-2022-329461

35

SiriSpy flaw allows eavesdropping on users' conversations with Siri

Security AffairsOct 27, 13:38 UTC · Oct 27, 2022VulnerabilityCVE-2022-329461

35