CVE-2022-32844

low-risk

Published 2023-02-27

A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6. An app with arbitrary kernel read and write capability may be able to bypass Pointer Authentication.

Do I need to act?

0.02% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 6.3/10 Medium

LOCAL / HIGH complexity

Affected Products (4)

Ipados

Iphone Os

Tvos

Watchos

Affected Vendors

Apple

References (6)

Vendor Advisory https://support.apple.com/en-us/HT213340

Vendor Advisory https://support.apple.com/en-us/HT213342

Vendor Advisory https://support.apple.com/en-us/HT213346

Vendor Advisory https://support.apple.com/en-us/HT213340

Vendor Advisory https://support.apple.com/en-us/HT213342

Vendor Advisory https://support.apple.com/en-us/HT213346

/ 100

low-risk

Severity 16/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 10/34 · Low