Vulnerability · Published Apr 10, 2023 · Assigned by apple

CVE-2022-32871

Low 2.4

In plain English

A low-severity security flaw in iOS from Apple. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities).

Severity (CVSS 3.1)2.4Low
Exploit odds (30 days)0.3%top 82.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16. A person with physical access to a device may be able to use Siri to access private calendar information

Affected products (as reported)

VendorProductVersions
Apple iOS unspecified – before 16

References