Lucene search
HistoryNov 01, 2022 - 8:15 p.m.
CVE-2022-32859
cve-2022-32859
logic issue
state management
ios 16
spotlight search
deleted contacts
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
28.7%
A logic issue was addressed with improved state management. This issue is fixed in iOS 16. Deleted contacts may still appear in spotlight search results.
Affected configurations
Node
appleiphone_osRange<16.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| apple:iphone_os | apple iphone os | lt | 16.0 |
CNA Affected
[
{
"vendor": "Apple",
"product": "iOS",
"versions": [
{
"version": "unspecified",
"lessThan": "16",
"status": "affected",
"versionType": "custom"
}
]
}
]References
Related
cvelist
cvelist
CVE-2022-32859
2022-11-01 00:00:00
nvd
nvd
CVE-2022-32859
2022-11-01 20:15:18
prion
prion
Code injection
2022-11-01 20:15:00
apple
apple
About the security content of iOS 16
2022-09-12 00:00:00
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
28.7%
Related for CVE-2022-32859