{"id":"CVE-2022-42827","kind":"vulnerability","aliases":["CVE-2022-42827"],"related":[],"title":"An out-of-bounds write issue was addressed with improved bounds checking","description":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..","summary":"An out-of-bounds write in the Apple iOS and iPadOS kernel lets an app running on the device execute code with kernel privileges. Attackers have exploited it in the wild.","severity":"high","cvss":7.8,"epss":null,"exploited":true,"exploited_at":"2022-10-25T00:00:00+00:00","products":[{"name":"Apple iOS and iPadOS","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"apple ipados","fixed":["15.7.1"],"affected":"< 15.7.1","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["15.7.1"],"affected":"< 15.7.1","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["16.1"],"affected":">= 16.0, < 16.1","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apple-devices","exploited","infrastructure","ios","ipados"],"not_affected_if":["fully-patched-devices"],"how_to_check":"Settings > General > About shows the iOS or iPadOS version; compare it to the fixed release in Apple's advisory.","fix":"Update iOS or iPadOS to a release that includes Apple's fix for CVE-2022-42827, as CISA requires per vendor instructions.","status":"open","published_at":"2022-10-25T00:00:00+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:10:26+00:00","updated_at":"2026-10-23T22:29:04+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T21:10:26Z","model":"claude-haiku-5-5","output":{"fix":"Update iOS or iPadOS to a release that includes Apple's fix for CVE-2022-42827, as CISA requires per vendor instructions.\nunknown","reach":"local","impact":"high","summary":"An out-of-bounds write in the Apple iOS and iPadOS kernel lets an app running on the device execute code with kernel privileges. Attackers have exploited it in the wild.","category":"infrastructure","who_cares":["ios","ipados","apple-devices"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Malicious app gains kernel privileges and full control of the device.","analyst_note":"Find Apple's security advisory for CVE-2022-42827 to get the exact fixed iOS and iPadOS versions and the affected version range.","how_to_check":"Settings > General > About shows the iOS or iPadOS version; compare it to the fixed release in Apple's advisory.\nunknown","needs_analyst":true,"not_affected_if":["fully-patched-devices"],"user_interaction":"unknown","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000473,"input_tokens":2804,"output_tokens":385,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2022':15A,18A '-42827':16A,19A '..':125C '15.7.1':90C,93C '16':98C '16.1':95C 'abl':103C 'activ':123C 'address':9A,79C 'and':22A 'app':54B 'appl':33B,47B,111C 'apple':20A,24A,26A,29A 'apple-devic':32B 'applic':100C 'arbitrari':106C 'attack':64B 'awar':113C 'bound':5A,12A,43B,75C,82C 'check':13A,83C 'code':60B,107C 'cve':14A,17A 'devic':34B,58B 'execut':59B,105C 'exploit':35B,66B,124C 'fix':87C 'improv':11A,81C 'infrastructur':36B 'io':37B,48B,89C,94C 'ios':21A 'ipado':38B,50B,92C,97C 'ipados':23A,25A 'iphone':27A,30A 'issu':7A,77C,85C,119C 'kernel':51B,62B,109C 'let':52B 'may':101C,120C 'os':28A,31A 'out-of-bound':2A,40B,72C 'privileg':63B,110C 'report':116C 'run':55B 'wild':70B 'write':6A,44B,76C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2022-10-25T00:00:00+00:00","kev":{"dateAdded":"2022-10-25","dueDate":"2022-11-15","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2022-42827","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-42827","severity":null,"published_at":"2022-10-25T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T20:35:35+00:00","note":null},{"source":"nvd","external_id":"CVE-2022-42827","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42827","severity":null,"published_at":"2022-11-01T20:15:24+00:00","modified_at":"2026-06-17T05:05:25+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}