CVE-2022-42827

Timeline

Detection, updates, and resolution for this record.

1. Oct 25, 2022 · Catalog

   Detected

   An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

2. Oct 25, 2022 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. Nov 15, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

Affected

• cpe apple/ipadosversion unspecified
• cpe apple/iphone osversion unspecified
• vendor Apple iOS and iPadOSversion unspecified

Sources

• CISA KEVCVE-2022-42827

  Apple iOS and iPadOS kernel contain an out-of-bounds write vulnerability which can allow an application to perform code execution with kernel privileges.

  cisa.gov
• CVE.orgCVE-2022-42827

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2022-42827

  30-day exploitation probability 1.1%

  first.org
• NIST NVDCVE-2022-42827

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have

  nvd.nist.gov

References

• CISA note · nvd.nist.gov
• CISA note · support.apple.com
• Vendor Advisory · support.apple.com
• US Government Resource · cisa.gov