CVE-2022-32892: Apple iPadOS

High severity, CVSS 8.6. EPSS: 0.6% chance of exploitation in the next 30 days.

An access issue was addressed with improvements to the sandbox. This issue is fixed in Safari 16, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Ventura 13. A sandboxed process may be able to circumvent sandbox restrictions.

Affected products

• Apple iPadOS: from 15.0, before 15.7 (fixed in 15.7)
• Apple iPhone OS: from 15.0, before 15.7 (fixed in 15.7)
• Apple macOS: before 13.0 (fixed in 13.0)
• Apple Safari: before 16.0 (fixed in 16.0)

Published 2022-11-01. Last modified 2026-06-17.