CVE-2022-42856

Apple iOS Type Confusion Vulnerability
8.5%
EPSS
95%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Apple iOS contains a type confusion vulnerability when processing maliciously crafted web content leading to code execution.

Vendor
Apple
Product
iOS
Added to KEV
Dec 14, 2022
Remediation due
Jan 4, 2023 (US federal deadline)
Ransomware use
Not known
Weakness
CWE-843
EPSS
8.5% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded