Main Vulnerability Database Vulnerabilities #VU68838

State Issues in Apple iOS and iPadOS - CVE-2022-32859

Published: October 31, 2022

Vulnerability identifier: #VU68838

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2022-32859

CWE-ID: CWE-371

Exploitation vector: Local access

Exploit availability: No public exploit available

Vendor: Apple Inc.

Affected software:
Apple iOS
iPadOS

Detailed vulnerability description

The vulnerability allows an attacker to gain access to sensitive information.

The vulnerability exists in Time Zone due to incorrect handling of deleted contacts, which still appear in the spotlight search results.

Install updates from vendor's website.