CVE-2022-22639

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. An application may be able to gain elevated privileges.

Affected

Apple · iOS and iPadOS · macOS

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

8.19% chance of exploitation in the next 30 days, 95th percentile

Published

2022-03-18

Updated

2024-08-03

Proof-of-concept exploits (1)

• jhftss/CVE-2022-22639123★ · 2022-04-05

Security advisories

• https://support.apple.com/en-us/HT213182
• https://support.apple.com/en-us/HT213183

References

• CVE Record
• NVD entry

Related

• CVE-2022-46722