CVE-2022-32893
Apple iOS and macOS Out-of-Bounds Write Vulnerability
Published Aug 18, 2022 · updated Jun 16, 2026 · apple safari
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Timeline
Detection, updates, and resolution for this record.
Aug 18, 2022 · Catalog
Detected
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Aug 18, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Sep 8, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Required action
Apply updates per vendor instructions.
CISA due date Sep 8, 2022
Affected
- cpe apple/ipadosversion unspecified
- cpe apple/iphone osversion unspecified
- cpe apple/macosversion unspecified
- cpe apple/safariversion unspecified
- cpe debian/debian linux10.0
- cpe debian/debian linux11.0
- cpe fedoraproject/fedora35
- cpe fedoraproject/fedora36
- cpe webkitgtk/webkitgtkversion unspecified
- vendor Apple iOS and macOSversion unspecified
Sources
- CISA KEVCVE-2022-32893
Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow for remote code execution when processing malicious crafted web content.
cisa.gov - CVE.orgCVE-2022-32893
Official CVE identifier
cve.org - FIRST EPSSCVE-2022-32893
30-day exploitation probability 9.9%
first.org - NIST NVDCVE-2022-32893
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that th
nvd.nist.gov