CVEvulnerability
CVE-2022-46700
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-12-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-787
Description
A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected configurations
• apple safari (< 16.2)
• apple ipados (>= 15.0 < 15.7.2)
• apple ipados (>= 16.0 < 16.2)
• apple iphone os (>= 15.0 < 15.7.2)
• apple iphone os (>= 16.0 < 16.2)
• apple macos 13.0
• apple tvos (< 16.2)
• apple watchos (< 9.2)
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- http://seclists.org/fulldisclosure/2022/Dec/20 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/21 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/23 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/26 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/27 seclists.org
- http://seclists.org/fulldisclosure/2022/Dec/28 Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/202305-32 security.gentoo.org
- https://support.apple.com/en-us/HT213530 Vendor Advisory
- https://support.apple.com/en-us/HT213531 Vendor Advisory
- https://support.apple.com/en-us/HT213532 Vendor Advisory
- https://support.apple.com/en-us/HT213535 Vendor Advisory
- https://support.apple.com/en-us/HT213536 Vendor Advisory
- https://support.apple.com/en-us/HT213537 Vendor Advisory
- http://seclists.org/fulldisclosure/2022/Dec/20 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/21 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/23 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/26 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/27 seclists.org
- http://seclists.org/fulldisclosure/2022/Dec/28 Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/202305-32 security.gentoo.org
- https://support.apple.com/en-us/HT213530 Vendor Advisory
- https://support.apple.com/en-us/HT213531 Vendor Advisory
- https://support.apple.com/en-us/HT213532 Vendor Advisory
- https://support.apple.com/en-us/HT213535 Vendor Advisory
- https://support.apple.com/en-us/HT213536 Vendor Advisory
- https://support.apple.com/en-us/HT213537 Vendor Advisory