cbcvebase.
CVE-2022-32893
published 2022-08-24

CVE-2022-32893: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari…

PriorityP188high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
KEVITW
CISA Known Exploited Vulnerabilitydue 2022-09-08
Exploited in the wild
EPSS
9.79%
95.0th percentile
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Affected

20 ranges
VendorProductVersion rangeFixed in
appleios
appleios_15.6.1_and_ipados
appleios_and_ipados>= unspecified < 15.615.6
appleipados< 15.6.115.6.1
appleiphone_os< 15.6.115.6.1
applemacos>= 12.0 < 12.5.112.5.1
applemacos>= unspecified < 12.512.5
applemacos_monterey
applesafari< 15.6.115.6.1
applesafari
applesafari>= unspecified < 15.615.6
applewatchos_9
debiandebian_linux
debiandebian_linux
debianwebkit2gtk< webkit2gtk 2.36.7-1 (bookworm)webkit2gtk 2.36.7-1 (bookworm)
debianwpewebkit< webkit2gtk 2.36.7-1 (bookworm)webkit2gtk 2.36.7-1 (bookworm)
fedoraprojectfedora
fedoraprojectfedora
webkitgtkwebkitgtk< 2.36.72.36.7
wpewebkitwpe_webkit< 2.36.72.36.7

Detection & IOCsextracted from sources · hover to see the quote

  • Vulnerability is in the WebKit component; trigger vector is processing maliciously crafted web content delivered via a browser or web view, leading to an out-of-bounds write and arbitrary code execution.
  • On Linux/Red Hat environments, the affected packages are webkitgtk (RHEL 6) and webkitgtk3 (RHEL 7); monitor for exploitation of these packages via network-delivered web content.
  • ·CVE-2022-32893 was actively exploited in the wild at time of disclosure; patched versions are iOS 15.6.1/iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1, and iOS 12.5.6. Unpatched devices remain at risk.
  • ·RHEL 6 and RHEL 7 webkitgtk packages are out of support scope for this flaw and will not receive patches; organizations running these versions should consider mitigating controls.

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv8.8HIGH
vulncheck8.8HIGH
cisa8.8HIGH
vendor_debian8.8HIGH
vendor_redhat8.8HIGH
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.