CVEvulnerability
CVE-2022-22594
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-03-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-346
Description
A cross-origin issue in the IndexDB API was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. A website may be able to track sensitive user information.
Affected configurations
• apple safari (< 15.3)
• apple ipados (< 15.3)
• apple iphone os (< 15.3)
• apple macos (< 12.2)
• apple tvos (< 15.3)
• apple watchos (< 8.4)
Related
Weakness · CWE (1)
- CWE-346 Origin Validation Error weakness
References
- https://support.apple.com/en-us/HT213053 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213054 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213057 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213058 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213059 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213053 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213054 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213057 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213058 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213059 Release Notes, Vendor Advisory