CVE-2022-32847

This issue was addressed with improved checks

Critical · published September 23, 2022

CVSS v3.1
9.1
EPSS
4%
Percentile
89.2
In the wild
Unconfirmed
What it is

🔥 A sneaky flaw in iOS and macOS could let a remote user crash your system or even corrupt kernel memory! Think of it like a waiter who accidentally spills a drink on a computer — a messy situation that could cause everything to crash or go haywire. This vulnerability allows an attacker to cause unexpected system termination, leaving your device in disarray. An attacker could exploit this vulnerability to crash your device unexpectedly, leading to system instability and potential data loss. With the ability to tamper with kernel memory, this could open the door to more serious attacks. The stakes are high, and with a CVSS score of 9.1, it’s a critical issue you don't want to ignore!

Put simply

Think of it like a waiter who accidentally spills a drink on a computer — a messy situation that could cause everything to crash or go haywire. This vulnerability allows an attacker to cause unexpected system termination, leaving your device in disarray. This vulnerability occurs due to insufficient checks in the system, allowing a remote user to influence kernel memory operations. The lack of proper validation opens up a pathway for exploitation, which could lead to crashes or corruption of the system's critical memory.

What to do

An attacker could exploit this vulnerability to crash your device unexpectedly, leading to system instability and potential data loss. With the ability to tamper with kernel memory, this could open the door to more serious attacks. The stakes are high, and with a CVSS score of 9.1, it’s a critical issue you don't want to ignore! To protect your devices, patch immediately to the latest version: iOS 15.6, iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, or macOS Monterey 12.5. Additionally, ensure you have installed Security Update 2022-005 for Catalina. Don't wait — it's better to be safe than sorry! You've got this! With these updates, you'll enhance your device's security and keep those attackers at bay! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03532 · 89.2th percentile
Published
2022-09-23T18:59Z
EPSS history
Timeline
  • 23 SEP 18:59Z
    This issue was addressed with improved checks
    cvelistv5