Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.4
CVE-2022-22599: Description: A permissions issue was addressed with improved validation. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, macOS Monterey 12.3. A person with physi...
CVE-2022-22599 · published 4 years ago
Summary
Description: A permissions issue was addressed with improved validation. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, macOS Monterey 12.3. A person with physical access to a device may be able to use Siri to obtain some location information from the lock screen...
What to do
- Update apple ipados to version 15.4 or later.
- Update apple iphone_os to version 15.4 or later.
- Update apple watchos to version 8.5 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| apple | ipados |
< 15.4 cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* |
| apple | iphone_os |
< 15.4 cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
| apple | macos |
< 11.6.5 >= 12.0.0, < 12.3 cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
| apple | watchos |
< 8.5 cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* |
Original advisory text
Description: A permissions issue was addressed with improved validation. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, macOS Monterey 12.3. A person with physi...
Description: A permissions issue was addressed with improved validation. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, macOS Monterey 12.3. A person with physical access to a device may be able to use Siri to obtain some location information from the lock screen.
References
- https://support.apple.com/en-us/HT213182 Release Notes Vendor Advisory
- https://support.apple.com/en-us/HT213183 Release Notes Vendor Advisory
- https://support.apple.com/en-us/HT213184 Release Notes Vendor Advisory
- https://support.apple.com/en-us/HT213193 Release Notes Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published18 Mar 2022
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2022-22599 · NVD
Track software like this
Free during beta