CVE-2022-32917

KEVApple iOS, iPadOS, and macOS Remote Code Execution Vulnerability

Description

Apple kernel, which is included in iOS, iPadOS, and macOS, contains an unspecified vulnerability where an application may be able to execute code with kernel privileges.

The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

CVSS 3.1 vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

PublishedSep 20, 2022

Last modifiedJun 17, 2026

Added to KEVSep 14, 2022

Remediation dueOct 5, 2022

References

seclists.org/fulldisclosure/2022/Oct/39Mailing ListThird Party Advisory
seclists.org/fulldisclosure/2022/Oct/40Mailing ListThird Party Advisory
seclists.org/fulldisclosure/2022/Oct/43Mailing ListThird Party Advisory
seclists.org/fulldisclosure/2022/Oct/45Mailing ListThird Party Advisory
support.apple.com/en-us/HT213443Release NotesVendor Advisory
support.apple.com/en-us/HT213444Release NotesVendor Advisory
support.apple.com/en-us/HT213445Release NotesVendor Advisory
support.apple.com/en-us/HT213446Release NotesVendor Advisory
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-32917US Government Resource

0 recent articles mention this CVE

Risk assessment · High

Actively exploited. Patch immediately.

Exploitation: Confirmed in the wild (CISA KEV)
Federal remediation deadline: Overdue by 1484 days
CVSS: 7.8 HIGH
EPSS (30-day exploit probability): 5.6% · top 7% of all CVEs
Weakness: CWE-787

Recommended actions

1.Apply updates per vendor instructions.
2.Treat as emergency change: patch or isolate internet-facing instances first.
3.Hunt for compromise: review logs for the disclosure window, not just from the patch date.

Assessment is derived automatically from the live signals above; verify against your own asset inventory.