VDB
CVE-2022-42827
CVE-2022-42827
PUBLISHED
KEV
In Apple iOS und Apple iPadOS existieren mehrere Schwachstellen. Diese bestehen in den Komponenten "AppleMobileFileIntegrity", "AVEVideoEncoder", "CFNetwork", "Core Bluetooth", "GPU Drivers", "IOHIDFamily", "IOKit", "Kernel", "ppp", "Sandbox", "Shortcuts", "WebKit" sowie "WebKit PDF". Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Programmcode mit Root-Rechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.
EPSS 0.17% · 37.6th percentile
Risk Scores
EPSS Score
0.17%
37.6th percentile
Exploit Intelligence
- Out-of-bounds write in the kernel (Apple iOS) (gpz)
- Out-of-bounds write in the kernel (Apple iOS) (gpz)
- Out-of-bounds write in the kernel (Apple iOS) (gpz)
- Out-of-bounds write in the kernel (Apple iOS) (gpz)
- Out-of-bounds write in the kernel (Apple iOS) (gpz)
- Out-of-bounds write in the kernel (Apple iOS) (gpz)
- kev.json (github-poc)
- kev.json (github-poc)
- kev.json (github-poc)
- kev.json (github-poc)
…and 8 more exploits
Timeline
- Oct 24, 2022 PoC Published
- Oct 24, 2022 CVE Published
- Oct 25, 2022 CISA KEV Added
- Nov 2, 2022 EPSS Score
- Nov 4, 2022 EPSS Score
- Dec 15, 2022 EPSS Score
- Jan 28, 2023 EPSS Score
- Mar 12, 2023 EPSS Score
- Apr 24, 2023 EPSS Score
- Jun 6, 2023 EPSS Score
- Jun 27, 2023 CVE Updated
- Jul 20, 2023 EPSS Score