CVE-2022-42824 — Apple Macos vulnerability

13 documents9 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 90.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Apple MacosApple TvosApple Watchos+5 more
Timeline
PublishedNov 1
Latest updateJan 29

Description

A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose sensitive user information.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages9 packages

▶CVEListV5apple/tvosunspecified — 16.1
▶NVDapple/tvos< 16.1
▶CVEListV5apple/macosunspecified — 13
▶NVDapple/macos< 13.0
▶NVDapple/ipados< 16.0

Also affects: Debian Linux 10.0, 11.0, Fedora 35, 36, 37

🔴Vulnerability Details

3
GHSA
GHSA-cjwx-h5pw-chvg: A logic issue was addressed with improved state management↗2022-11-02
▶
CVEList
CVE-2022-42824: A logic issue was addressed with improved state management↗2022-11-01
▶
OSV
CVE-2022-42824: A logic issue was addressed with improved state management↗2022-11-01
▶

📋Vendor Advisories

8
Ubuntu
WebKitGTK vulnerabilities↗2022-11-17
▶
Red Hat
webkitgtk: sensitive information disclosure issue↗2022-10-31
▶
Apple
CVE-2022-42824: iOS 16.1 and iPadOS 16↗2022-10-24
▶
Apple
CVE-2022-42824: tvOS 16.1↗2022-10-24
▶
Apple
CVE-2022-42824: watchOS 9.1↗2022-10-24
▶

💬Community

1
Bugzilla
Same-Origin Policy Bypass Image Size Leak in Drag and Drop↗2023-01-29
▶
CVE-2022-42824 — Apple Macos vulnerability | cvebase