---
id: "CVE-2022-32917"
kind: "vulnerability"
aliases: ["CVE-2022-32917"]
title: "The issue was addressed with improved bounds checks"
severity: "high"
cvss: 7.8
epss: 0.05603
exploited: true
status: "open"
category: "vendor"
products: [{"name": "Apple iOS, iPadOS, and macOS", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "apple ipados", "fixed": ["15.7"], "affected": "< 15.7", "ecosystem": "vendor"}, {"name": "apple iphone os", "fixed": ["15.7"], "affected": "< 15.7", "ecosystem": "vendor"}, {"name": "apple macos", "fixed": ["11.7"], "affected": ">= 11.0, < 11.7", "ecosystem": "vendor"}, {"name": "apple macos", "fixed": ["12.6"], "affected": ">= 12.0.0, < 12.6", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["apple-devices", "exploited", "ios", "ipados", "macos", "vendor"]
not_affected_if: ["fully-patched-devices"]
published_at: "2022-09-14T00:00:00+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T22:29:04+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-32917", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-32917", "first_seen_at": "2026-10-23T19:13:45+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-32917", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# The issue was addressed with improved bounds checks

Apple's kernel, shipped in iOS, iPadOS and macOS, has an unspecified flaw that lets an app run code with kernel privileges. A malicious app on the device can take full control of the operating system.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Apple iOS, iPadOS, and macOS affected ? fixed ?
- vendor:apple ipados affected < 15.7 fixed 15.7
- vendor:apple iphone os affected < 15.7 fixed 15.7
- vendor:apple macos affected >= 11.0, < 11.7 fixed 11.7
- vendor:apple macos affected >= 12.0.0, < 12.6 fixed 12.6

## How to check

Check the device OS version in Settings > General > About (iOS/iPadOS) or About This Mac (macOS) and compare it against the fixed release in Apple's security notes.

## Fix

Update iOS, iPadOS and macOS to a release that includes Apple's fix for CVE-2022-32917, per Apple's vendor instructions named in the CISA KEV entry.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-32917
- 2026-10-23T19:13:45+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2022-32917
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2022-32917

## From the sources

The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_