VulnSocial

CVE-2022-42856Active Exploitation(apple / ipados)

MEDIUMCVSS 8.8 · HIGHCISA KEV

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for apple ipados systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.1.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.1..

apple CVEsBack to dashboard
4.0/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2023-01-04. Apply updates per vendor instructions.

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-843

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • ipados
  • iphone_os
  • macos
  • safari

Threat summary

  • Active exploitation appears in 1 classified signals
  • 1 mentions across 1 observed day

What's happening

  • Active exploitation reported across 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
apple
Products
ipadosiphone_osmacossafaritvos

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-03: 1Active Exploitation · 2026-07-03: 107-03
Signal classification1 categories
Active Exploitation
1100.0%
Referenced assets1 URL
Full discourse1 post
  • Aviatrix Threat Research Center@aviatrixtrc
    Active Exploitation

    TRC analysis shows Pegasus spyware targeted a PEGA Committee member twice during critical investigation phases in 2022-2023. The attacks exploited iOS vulnerabilities (CVE-2022-42856) to establish persistent surveillance and exfiltrate sensitive data from the device. #ThreatIntel 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/pegasus-spyware-infection-pega-committee-member-2022-2023

    Post summary

    Pegasus spyware exploited CVE-2022-42856 to conduct persistent surveillance and data exfiltration on an iOS device of a PEGA Committee member, confirming real‑world active exploitation.

    0000074
    1.9K followersView on X
CPE platform detail5 entries

5 of 5 entries

PartVendorProductVersionTarget SWTarget HW
OSappleipados---
OSappleiphone_os---
OSapplemacos---
Appapplesafari---
OSappletvos---

Explore more

Back to dashboardapple CVEsipados vulnerabilities