High Threat Security Alert (A22-01-21): Multiple Vulnerabilities in Apple iOS and iPadOS
27 January 2022
Apple has released iOS 15.3 and iPadOS 15.3 to fix the vulnerabilities in various Apple devices. The list of vulnerability information can be found at:
Reports indicate that a memory corruption vulnerability (CVE-2022-22587) is being actively exploited in the wild and an information disclosure vulnerability (CVE-2022-22594) is also at a high risk of exploitation. You are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.
iPhone 6s and later
iPad 5th generation and later, Air 2 and later, mini 4 and later, Pro (all models)
iPod touch (7th generation)
A successful exploitation could lead to arbitrary code execution, information disclosure, privilege escalation, or security restriction bypass on an affected device.
Apple has released new version of iOS and iPadOS to address the issue.
The updates can be obtained through the auto-update mechanism. Users of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.