CVE-2022-22671: Apple iPadOS

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

An authentication issue was addressed with improved state management. This issue is fixed in iOS 15.4 and iPadOS 15.4. A person with physical access to an iOS device may be able to access photos from the lock screen.

Affected products

• Apple iPadOS: before 15.4 (fixed in 15.4)
• Apple iPhone OS: before 15.4 (fixed in 15.4)

Published 2022-03-18. Last modified 2026-06-17.