CVE-2022-22637 — Origin Validation Error in Apple Safari

CWE-346 — Origin Validation Error12 documents8 sources
Severity
8.8HIGHNVD
EPSS
0.2%
top 52.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Apple SafariApple TvosApple Watchos+3 more
Timeline
PublishedSep 23
Latest updateSep 25

Description

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. A malicious website may cause unexpected cross-origin behavior.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages9 packages

▶CVEListV5apple/tvosunspecified — 15.4+1
▶NVDapple/tvos< 15.4
▶NVDapple/macos12.0 — 12.3
▶CVEListV5apple/safariunspecified — 15.4
▶NVDapple/safari< 15.4

🔴Vulnerability Details

3
GHSA
GHSA-p38h-v883-px7v: A logic issue was addressed with improved state management↗2022-09-25
▶
OSV
CVE-2022-22637: A logic issue was addressed with improved state management↗2022-09-23
▶
CVEList
CVE-2022-22637: A logic issue was addressed with improved state management↗2022-09-23
▶

📋Vendor Advisories

8
Ubuntu
WebKitGTK vulnerabilities↗2022-04-28
▶
Red Hat
webkitgtk: logic issue was addressed with improved state management↗2022-04-08
▶
Apple
CVE-2022-22637: Safari 15.4↗2022-03-15
▶
Apple
CVE-2022-22637: watchOS 8.5↗2022-03-14
▶
Apple
CVE-2022-22637: macOS Monterey 12.3↗2022-03-14
▶
CVE-2022-22637 — Origin Validation Error in Apple | cvebase