Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Jan 4, 2023

CVE-2022-42856

High
EPSS 0.2%CISA KEV
Apple/iOS

Description

Apple iOS contains a type confusion vulnerability when processing maliciously crafted web content leading to code execution.

EPSS — Exploit Probability

0.2%

Higher than 40.3% of all CVEs

Required Action

https://support.apple.com/en-us/HT213516; https://nvd.nist.gov/vuln/detail/CVE-2022-42856

Risk Assessment

ELEVATED
In CISA KEV

Details

Severity
High
EPSS
0.2%
CISA KEV
Yes
Ransomware
Unknown
Articles
0

Timeline

Published

Dec 14, 2022

Added to KEV

Dec 14, 2022

Remediation Due

Jan 4, 2023

Affected Product

Apple

iOS

View all Apple CVEs