CVE-2022-42827: high-severity vulnerability in Apple iOS and iPadOS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply updates per vendor instructions.
A flaw in iOS and iPadOS allows an app to write data beyond intended memory boundaries, potentially letting it run malicious code with system-level permissions. This is dangerous because it can give attackers complete control over your device.
An out-of-bounds write vulnerability (CWE-787) in iOS/iPadOS kernel memory handling allows a local application to write beyond allocated buffer boundaries. Exploitation requires a malicious app installed on the device and results in arbitrary code execution with kernel privileges, bypassing normal security protections.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.