CVE-2022-22637
published 2022-09-23CVE-2022-22637: A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4…
high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. A malicious website may cause unexpected cross-origin behavior.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_15.4_and_ipados | — | — |
| apple | ipad_os | < 15.4 | 15.4 |
| apple | iphone_os | < 15.4 | 15.4 |
| apple | macos | >= 12.0 < 12.3 | 12.3 |
| apple | macos_monterey | — | — |
| apple | safari | < 15.4 | 15.4 |
| apple | safari | — | — |
| apple | safari | >= unspecified < 15.4 | 15.4 |
| apple | tvos | < 15.4 | 15.4 |
| apple | tvos | — | — |
| apple | tvos | >= unspecified < 15.4 | 15.4 |
| apple | tvos | >= unspecified < 12.3 | 12.3 |
| apple | watchos | < 8.5 | 8.5 |
| apple | watchos | — | — |
| apple | watchos | >= unspecified < 8.5 | 8.5 |
| debian | webkit2gtk | < webkit2gtk 2.34.4-1 (bookworm) | webkit2gtk 2.34.4-1 (bookworm) |
| debian | wpewebkit | < webkit2gtk 2.34.4-1 (bookworm) | webkit2gtk 2.34.4-1 (bookworm) |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv8.8HIGH