CVE-2022-32894

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero

Triaged: March 5, 2026 12 articles

VulnLookup ↗ NVD ↗ MITRE ↗ Advisory ↗ P0 Sheet ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24

0.33%

probability

This CVE has a 0.33% probability of being exploited in the next 30 days.

0% Top 56.1th percentile of all CVEs 100%

CVSS score unavailable

Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Description

Project Zero

Kernel out-of-bounds write

Attack Intelligence

CWE-118 · Incorrect Access of Indexable Resource ('Range Error') CWE-119 · Buffer Overflow CWE-664 · Improper Control of a Resource Through its Lifetime CWE-787 · Out-of-bounds Write

Google Project Zero

Patched

Aug. 17, 2022

Reported by

???

Root Cause Analysis

???

Apple fixes new zero-day used in attacks against iPhones, iPads

BleepingComputer Oct 24, 2022

Apple fixes eighth zero-day used to hack iPhones and Macs this year

BleepingComputer Sep 12, 2022

Apple Releases iOS and macOS Updates to Patch Actively Exploited Zero-Day Flaw

TheHackerNews

Apple backports fix for actively exploited iOS zero-day to older iPhones

BleepingComputer Aug 31, 2022

Apple Releases iOS Update for Older iPhones to Fix Actively Exploited Vulnerability

TheHackerNews

October 2022 Patch Tuesday | Microsoft Releases 84 Vulnerabilities With 13 Critical, Plus 12 Microsoft Edge (Chromium-Based); Adobe Releases 4 Advisories, 29 Vulnerabilities With 17 Critical.

Qualys Oct 11, 2022

Apple Releases Patch for New Actively Exploited iOS and iPadOS Zero-Day Vulnerability

TheHackerNews

Apple security update fixes new iOS zero-day used to hack iPhones

BleepingComputer Dec 13, 2022

September 2022 Patch Tuesday | Microsoft Releases 63 Vulnerabilities With 5 Critical, Plus 16 Microsoft Edge (Chromium-Based); Adobe Releases 7 Advisories, 63 Vulnerabilities With 35 Critical.

Qualys Sep 13, 2022

Apple Releases Security Updates to Patch Two New Zero-Day Vulnerabilities

TheHackerNews

CISA Adds 7 New Actively Exploited Vulnerabilities to Catalog

TheHackerNews

Apple fixes recently disclosed zero-day on older iPhones, iPads

BleepingComputer Oct 27, 2022

Signal Intelligence

Confidenceⓘ

95%

EPSS 0.33%

Mentions 12

Last Seen Dec 13, 2022

CNA Information

Analyst Note

Auto-imported from Google Project Zero — confirmed zero-day by definition.

Threat Actors 1

Killnet

apt_group 🇷🇺 RU

Triage Info

Decided atMar 05, 2026