VYPR
Unrated severityNVD Advisory· Published Sep 23, 2022· Updated May 27, 2025

CVE-2022-32849

CVE-2022-32849

Description

An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to access sensitive user information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

An app may access sensitive user information on Apple devices due to an information disclosure issue fixed in iOS 15.6, iPadOS 15.6, macOS Big Sur 11.6.8, tvOS 15.6, macOS Monterey 12.5, and Security Update 2022-005 Catalina.

Vulnerability

An information disclosure issue existed in Apple operating systems that allowed an app to access sensitive user information. The vulnerable code was removed in iOS 15.6, iPadOS 15.6, macOS Big Sur 11.6.8, tvOS 15.6, macOS Monterey 12.5, and Security Update 2022-005 Catalina [1][2][3][4]. The specific component is not disclosed in the available references.

Exploitation

An attacker would need to have an app installed on the device. No special privileges or user interaction beyond installing the app is required. The app could then exploit the vulnerability to access sensitive user information.

Impact

Successful exploitation allows an app to access sensitive user information, leading to a breach of confidentiality. The full scope of information accessible is not detailed, but it could include personal data.

Mitigation

Apple released fixes for this issue on July 20, 2022, in iOS 15.6, iPadOS 15.6, macOS Big Sur 11.6.8, tvOS 15.6, macOS Monterey 12.5, and Security Update 2022-005 Catalina [2][3][4]. Users should update to the latest versions to protect against this vulnerability.

AI Insight generated on May 25, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

7

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.