EXPOSURES › CVE-2022-32893

CVE-2022-32893

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2022-08-18 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2022-32893 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 rceexploited-in-wildunpatched

Apple iOS and macOS vulnerable to remote code execution via malicious web content

Apple iOS and macOS are affected by an out-of-bounds write vulnerability that could enable remote code execution through maliciously crafted web content. This has been actively exploited in the wild, posing a high risk to DIB organizations.

Shame score — Active exploitation in the wild indicates negligence in addressing a critical security flaw.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

apple · vendor iOS and macOS · product

DESCRIPTION

Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow for remote code execution when processing malicious crafted web content.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.