CVEvulnerability
CVE-2022-46705
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-02-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Description
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, Safari 16.2. Visiting a malicious website may lead to address bar spoofing.
Affected configurations
• apple safari (< 16.2)
• apple ipados (< 15.7.2)
• apple ipados (>= 16.0 < 16.2)
• apple iphone os (< 15.7.2)
• apple iphone os (>= 16.0 < 16.2)
• apple macos (< 13.1)
• apple tvos (< 16.2)
• apple watchos (< 9.2)
References
- http://www.openwall.com/lists/oss-security/2023/11/15/1 Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT213530 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213532 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213537 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213531 Vendor Advisory
- https://support.apple.com/kb/HT213535 Vendor Advisory
- https://support.apple.com/kb/HT213536 Vendor Advisory
- https://support.apple.com/kb/HT213676 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2023/11/15/1 Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT213530 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213532 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213537 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213531 Vendor Advisory
- https://support.apple.com/kb/HT213535 Vendor Advisory
- https://support.apple.com/kb/HT213536 Vendor Advisory
- https://support.apple.com/kb/HT213676 Vendor Advisory