CVE-2022-42856VulnerabilityPublished 12/14/2022Updated 10/24/2026
CVE-2022-42856: Apple iOS Type Confusion Vulnerability
Affects Apple iOSSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 12/14/2022
- KEV deadline
- 01/04/2023
- EPSS
- 8.5% chance of exploitation in 30 days – higher than 95% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
Apple iOS contains a type confusion vulnerability when processing maliciously crafted web content leading to code execution.