CVEvulnerability
CVE-2022-32863
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2022-09-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-787
Description
A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 15.6, macOS Monterey 12.5. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected configurations
• apple safari (< 15.6)
• apple macos (>= 12.0.0 < 12.5)
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://support.apple.com/en-us/HT213341 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213345 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213346 support.apple.com
- https://support.apple.com/en-us/HT213341 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213345 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213346 support.apple.com