Security features bypass in Apple iOS and iPadOS - CVE-2022-26703
Published: May 17, 2022
Vulnerability identifier: #VU63295
CSH Severity: Low
CVSS v4: 2.4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-26703
CWE-ID: CWE-254
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an attacker to gain access to sensitive information.
The vulnerability exists in the Shortcuts component. An attacker with physical access to device can access photos from the lock screen.
Affected software
Apple iOS
iPadOS
iPadOS
How to mitigate CVE-2022-26703
Install updates from vendor's website.
Apple iOS - update to 15.5 19F77
iPadOS - update to 15.5 19F77
iPadOS - update to 15.5 19F77