CVE-2022-22639 is a logic issue affecting Apple iOS, iPadOS, and macOS Monterey that could allow an application to gain elevated privileges due to improved state management. With a CVSS score of 7.8 (High), this vulnerability requires local access and user interaction (e.g., clicking a malicious link) to exploit, potentially leading to high impact on confidentiality, integrity, and availability. While the vulnerability is patched in iOS 15.4, iPadOS 15.4, and macOS Monterey 12.3, there is currently no public exploit code available (Metasploit, Nuclei, ExploitDB), and it is not listed on the CISA KEV catalog. Community discussion and media coverage are minimal, suggesting low public awareness or active exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 15.4CPE matchmatch criteria | cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* | ||
< 15.4CPE matchmatch criteria | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* | ||
< 12.3CPE matchmatch criteria | cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.