CVE-2022-22599: Apple iPadOS

Low severity, CVSS 2.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Description: A permissions issue was addressed with improved validation. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, macOS Monterey 12.3. A person with physical access to a device may be able to use Siri to obtain some location information from the lock screen.

Affected products

• Apple iPadOS: before 15.4 (fixed in 15.4)
• Apple iPhone OS: before 15.4 (fixed in 15.4)
• Apple macOS: before 11.6.5 (fixed in 11.6.5); from 12.0.0, before 12.3 (fixed in 12.3)
• Apple watchOS: before 8.5 (fixed in 8.5)

Published 2022-03-18. Last modified 2026-06-17.