Main Vulnerability Database Vulnerabilities #VU68838

#VU68838 State Issues in Apple iOS and iPadOS - CVE-2022-32859

Published: October 31, 2022

Vulnerability identifier: #VU68838

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2022-32859

CWE-ID: CWE-371

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
Apple iOS
iPadOS

Software vendor:
Apple Inc.

Description

The vulnerability allows an attacker to gain access to sensitive information.

The vulnerability exists in Time Zone due to incorrect handling of deleted contacts, which still appear in the spotlight search results.

Install updates from vendor's website.