CVE-2022-22587: Apple Memory Corruption Vulnerability

Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-01-28. EPSS: 11.6% chance of exploitation in the next 30 days.

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3, macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

Affected products

• Apple iPadOS: before 15.3 (fixed in 15.3)
• Apple iPhone OS: before 15.3 (fixed in 15.3)
• Apple macOS: before 11.6.3 (fixed in 11.6.3); from 12.0, before 12.2 (fixed in 12.2)

Published 2022-03-18. Last modified 2026-06-17.