CVE-2022-22659: Apple iPadOS

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.4 and iPadOS 15.4. An attacker in a privileged network position may be able to leak sensitive user information.

Affected products

• Apple iPadOS: before 15.4 (fixed in 15.4)
• Apple iPhone OS: before 15.4 (fixed in 15.4)

Published 2022-03-18. Last modified 2026-06-17.