{"id":"CVE-2022-32917","published":"2022-09-20T21:15:11Z","modified":"2026-06-17T04:48:12Z","title":"Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability","vendor":"Apple","product":"iOS, iPadOS, and macOS","tier":"core","eol":null,"description":{"text":"The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..","provenance":"source","from":"NVD"},"summary":{"text":"The flaw is a bounds-checking weakness in the kernel of Apple's iOS, iPadOS, and macOS operating systems, which Apple has addressed with improved bounds checks. An attacker who can run a malicious application on the affected device, with low privileges and without any user interaction, can execute arbitrary code with kernel privileges.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:13:42Z"},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"NVD"},"epss":{"score":0.05603,"percentile":0.9291,"date":"2026-10-31","provenance":"source"},"kev":{"dateAdded":"2022-09-14","dueDate":"2022-10-05","ransomware":false,"requiredAction":"Apply updates per vendor instructions.","notes":"https://support.apple.com/en-us/HT213445, https://support.apple.com/en-us/HT213444;  https://nvd.nist.gov/vuln/detail/CVE-2022-32917","provenance":"source"},"vulncheckKev":{"dateAdded":"2022-09-12","exploitedFirstSeen":"2022-09-12","ransomware":false,"evidence":[{"url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit","date":"2022-09-12"},{"url":"https://support.apple.com/kb/HT213443","date":"2022-09-12"},{"url":"https://support.apple.com/kb/HT213444","date":"2022-09-12"},{"url":"https://support.apple.com/kb/HT213445","date":"2022-09-12"},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","date":"2022-09-14"},{"url":"https://raw.githubusercontent.com/blackorbird/APT_REPORT/master/summary/2023/360_APT_Annual_Research_Report_2022.pdf","date":"2023-01-17"}],"evidenceTotal":6,"provenance":"source"},"exploited":true,"otx":null,"cwes":[{"id":"CWE-787","name":"Out-of-bounds Write"},{"id":"CWE-20","name":"Improper Input Validation"}],"references":[{"url":"http://seclists.org/fulldisclosure/2022/Oct/39","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2022/Oct/40","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2022/Oct/43","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2022/Oct/45","tags":["Mailing List","Third Party Advisory"]},{"url":"https://support.apple.com/en-us/HT213443","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213444","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213445","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213446","tags":["Release Notes","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2022/Oct/39","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2022/Oct/40","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2022/Oct/43","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2022/Oct/45","tags":["Mailing List","Third Party Advisory"]},{"url":"https://support.apple.com/en-us/HT213443","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213444","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213445","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213446","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-32917","tags":["US Government Resource"]}],"techniques":[{"id":"T1068","name":"Exploitation for Privilege Escalation","tactics":["privilege-escalation"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Local app escalates to kernel privileges","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"An application may be able to execute arbitrary code with kernel privileges","start":151,"end":226}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2022-35983","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-35983","exploited":true,"exploitedSince":"2022-09-14","provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[{"stage":"exploitation","techniques":["T1068"],"provenance":"ai"}],"timeline":[{"date":"2022-09-12","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit","provenance":"source"},{"date":"2022-09-14","kind":"kev","label":"Added to CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","provenance":"source"},{"date":"2022-09-14","kind":"euvd-exploited","label":"ENISA EUVD: exploited","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-35983","provenance":"source"},{"date":"2022-09-20","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32917","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":59.0,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in CISA KEV and VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1511 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":18.58,"detail":"percentile 0.9291"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":5.46,"detail":"base score 7.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"familyId":"fam-class-apple-ios-macos-cwe-787"}}