{"id":"CVE-2022-32917","kind":"vulnerability","aliases":["CVE-2022-32917"],"related":[],"title":"The issue was addressed with improved bounds checks","description":"The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..","summary":"Apple's kernel, shipped in iOS, iPadOS and macOS, has an unspecified flaw that lets an app run code with kernel privileges. A malicious app on the device can take full control of the operating system.","severity":"high","cvss":7.8,"epss":0.05603,"exploited":true,"exploited_at":"2022-09-14T00:00:00+00:00","products":[{"name":"Apple iOS, iPadOS, and macOS","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"apple ipados","fixed":["15.7"],"affected":"< 15.7","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["15.7"],"affected":"< 15.7","ecosystem":"vendor"},{"name":"apple macos","fixed":["11.7"],"affected":">= 11.0, < 11.7","ecosystem":"vendor"},{"name":"apple macos","fixed":["12.6"],"affected":">= 12.0.0, < 12.6","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apple-devices","exploited","ios","ipados","macos","vendor"],"not_affected_if":["fully-patched-devices"],"how_to_check":"Check the device OS version in Settings > General > About (iOS/iPadOS) or About This Mac (macOS) and compare it against the fixed release in Apple's security notes.","fix":"Update iOS, iPadOS and macOS to a release that includes Apple's fix for CVE-2022-32917, per Apple's vendor instructions named in the CISA KEV entry.","status":"open","published_at":"2022-09-14T00:00:00+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:10:40+00:00","updated_at":"2026-10-23T22:29:04+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-23T21:10:40Z","model":"claude-haiku-5-5","output":{"fix":"Update iOS, iPadOS and macOS to a release that includes Apple's fix for CVE-2022-32917, per Apple's vendor instructions named in the CISA KEV entry.\nunknown","reach":"local","impact":"high","summary":"Apple's kernel, shipped in iOS, iPadOS and macOS, has an unspecified flaw that lets an app run code with kernel privileges. A malicious app on the device can take full control of the operating system.","category":"vendor","who_cares":["ios","ipados","macos","apple-devices"],"confidence":0.6,"needs_auth":"no","worst_case":"Malicious app gains kernel privileges and full device control","analyst_note":"Find the fixed iOS, iPadOS and macOS versions in Apple's security releases page; sources given do not name them and the KEV entry is in the wild.","how_to_check":"Check the device OS version in Settings > General > About (iOS/iPadOS) or About This Mac (macOS) and compare it against the fixed release in Apple's security notes.\nunknown","needs_analyst":true,"not_affected_if":["fully-patched-devices"],"user_interaction":"unknown","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000498,"input_tokens":2861,"output_tokens":424,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2022':10A,13A '-32917':11A,14A '..':126C '11.7':99C '12.6':88C '15.7':90C,93C '16':95C 'abl':104C 'activ':124C 'address':4A,76C 'and':18A 'app':53B,61B 'appl':30B,37B,112C 'apple':15A,20A,22A,25A,27A 'apple-devic':29B 'applic':101C 'arbitrari':107C 'awar':114C 'big':97C 'bound':7A,79C 'check':8A,80C 'code':55B,108C 'control':68B 'cve':9A,12A 'devic':31B,64B 'execut':106C 'exploit':32B,125C 'fix':84C 'flaw':49B 'full':67B 'improv':6A,78C 'io':33B,42B,89C,94C 'ios':16A 'ipado':34B,43B,92C 'ipados':17A,21A 'iphone':23A 'issu':2A,74C,82C,120C 'kernel':39B,57B,110C 'let':51B 'maco':35B,45B,86C,96C 'macos':19A,26A,28A 'malici':60B 'may':102C,121C 'monterey':87C 'oper':71B 'os':24A 'privileg':58B,111C 'report':117C 'run':54B 'ship':40B 'sur':98C 'system':72B 'take':66B 'unspecifi':48B 'vendor':36B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2022-09-14T00:00:00+00:00","kev":{"dateAdded":"2022-09-14","dueDate":"2022-10-05","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2022-32917","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-32917","severity":null,"published_at":"2022-09-14T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T16:39:47+00:00","note":null},{"source":"epss","external_id":"CVE-2022-32917","url":"https://api.first.org/data/v1/epss?cve=CVE-2022-32917","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:45+00:00","fetched_at":"2026-10-23T19:13:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2022-32917","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32917","severity":null,"published_at":"2022-09-20T21:15:11+00:00","modified_at":"2026-06-17T04:48:12+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}