CVE-2022-32917

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero

Triaged: March 5, 2026 6 articles

VulnLookup ↗ NVD ↗ MITRE ↗ Advisory ↗ P0 Sheet ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24

0.58%

probability

This CVE has a 0.58% probability of being exploited in the next 30 days.

0% Top 69.3th percentile of all CVEs 100%

CVSS score unavailable

Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Description

Project Zero

Unspecified kernel vulnerability

Attack Intelligence

CWE-118 · Incorrect Access of Indexable Resource ('Range Error') CWE-119 · Buffer Overflow CWE-664 · Improper Control of a Resource Through its Lifetime CWE-787 · Out-of-bounds Write

Google Project Zero

Patched

Sept. 12, 2022

Reported by

???

Root Cause Analysis

https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-32917.html

Apple fixes new zero-day used in attacks against iPhones, iPads

BleepingComputer Oct 24, 2022

Apple fixes eighth zero-day used to hack iPhones and Macs this year

BleepingComputer Sep 12, 2022

Apple Releases iOS and macOS Updates to Patch Actively Exploited Zero-Day Flaw

TheHackerNews

Apple Releases Patch for New Actively Exploited iOS and iPadOS Zero-Day Vulnerability

TheHackerNews

Apple security update fixes new iOS zero-day used to hack iPhones

BleepingComputer Dec 13, 2022

Apple fixes recently disclosed zero-day on older iPhones, iPads

BleepingComputer Oct 27, 2022

Signal Intelligence

Confidenceⓘ

95%

EPSS 0.58%

Mentions 6

Last Seen Dec 13, 2022

CNA Information

Analyst Note

Auto-imported from Google Project Zero — confirmed zero-day by definition.

Threat Actors 2

Lazarus Group

apt_group Information theft and espionage 🇰🇵 KP

Killnet

apt_group 🇷🇺 RU

Triage Info

Decided atMar 05, 2026