EXPOSURES › CVE-2022-42856

CVE-2022-42856

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2022-12-14 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2022-42856 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 rceexploited-in-wildunpatched

Apple iOS had an active web content execution flaw

Apple iOS allowed remote code execution through maliciously crafted web content, as confirmed by KEV.

Shame score — Active exploitation leading to remote code execution without a patch.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

DESCRIPTION

Apple iOS contains a type confusion vulnerability when processing maliciously crafted web content leading to code execution.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.