CVE-2022-32840

EUVD-2022-35906
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, iOS 15.6 and iPadOS 15.6. An app may be able to execute arbitrary code with kernel privileges.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA-ADPADP
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 35%
Affected Products (NVD)
VendorProductVersion
appleipados
𝑥
< 15.6
appleiphone_os
𝑥
< 15.6
applemacos
12.0 ≤
𝑥
< 12.5
applewatchos
𝑥
< 8.7
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.apple.com/en-us/HT213340
https://support.apple.com/en-us/HT213345
https://support.apple.com/en-us/HT213346
https://support.apple.com/en-us/HT213340
https://support.apple.com/en-us/HT213345
https://support.apple.com/en-us/HT213346