Apple Fixes Actively Exploited iOS and iPadOS Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-32894 | Kernel Out-of-Bounds Write in Apple iOS, iPadOS and macOS — Actively Exploited | 7.8 | 3% | KEV | KEV |
| CVE-2022-32917 | Out-of-Bounds Write in Apple iOS, iPadOS, macOS Enables Kernel-Privilege Code Execution | 7.8 | 6% | KEV | KEV |
CVE-2022-42823+1 related CVE | A type confusion issue was addressed with improved memory handling | 8.8 | 2% | ||
CVE-2022-42808+1 related CVE | An out-of-bounds write issue was addressed with improved bounds checking | 9.8 | 2% | ||
| CVE-2022-42827 | Actively Exploited Out-of-Bounds Write in Apple iOS and iPadOS Kernel | 7.8 | 1% | KEV | KEV |
From the original article
1 min read at infosecurity-magazine.com
Apple released new updates on Monday to patch a zero-day vulnerability in iOS and iPadOS devices that has reportedly been actively exploited in the wild. The out-of-bounds write issue in the kernel (tracked CVE-2022-42827) could be exploited by rogue applications to execute arbitrary code with admin privileges. "Apple is aware of a report that this issue may have been actively exploited," the company wrote.
By Alessandro Mascellino · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.