CVE-2022-32917

KEV

Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability

Vendor / Project: Apple
Product: iOS, iPadOS, and macOS
Date added: Sep 14, 2022
Due date: Oct 5, 2022
Known ransomware use: Unknown
CWEs: CWE-20, CWE-787

Description

Apple kernel, which is included in iOS, iPadOS, and macOS, contains an unspecified vulnerability where an application may be able to execute code with kernel privileges.

Required action

Apply updates per vendor instructions.

Notes

https://support.apple.com/en-us/HT213445, https://support.apple.com/en-us/HT213444
https://nvd.nist.gov/vuln/detail/CVE-2022-32917