Main Vulnerability Database Vulnerabilities #VU68838

State Issues in Apple iOS and iPadOS - CVE-2022-32859

Published: October 31, 2022

Vulnerability identifier: #VU68838

CSH Severity: Low

CVSS v4: 2.4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-32859

CWE-ID: CWE-371

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows an attacker to gain access to sensitive information.

The vulnerability exists in Time Zone due to incorrect handling of deleted contacts, which still appear in the spotlight search results.

Apple iOS
iPadOS

Install updates from vendor's website.

Apple iOS - update to 16.0 20A362
iPadOS - update to 16.0 20A362