CVE-2022-46698

CWE-693CWE-200 — Information Exposure13 documents8 sources
Severity
6.5MEDIUM
EPSS
1.0%
top 23.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Apple Icloud FOR WindowsApple TvosApple Watchos+5 more
Timeline
PublishedDec 15
Latest updateJan 9

Description

A logic issue was addressed with improved checks. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may disclose sensitive user information.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages12 packages

▶CVEListV5apple/icloud_for_windowsunspecified — 14.1
▶CVEListV5apple/tvosunspecified — 16.2+1
▶NVDapple/tvos< 16.2
▶NVDapple/macos< 13.1
▶NVDapple/icloud< 14.0

🔴Vulnerability Details

3
CVEList
CVE-2022-46698: A logic issue was addressed with improved checks↗2022-12-15
▶
GHSA
GHSA-3mmq-4r29-8xqf: A logic issue was addressed with improved checks↗2022-12-15
▶
OSV
CVE-2022-46698: A logic issue was addressed with improved checks↗2022-12-15
▶

📋Vendor Advisories

9
Ubuntu
WebKitGTK vulnerabilities↗2023-01-09
▶
Red Hat
webkitgtk: logic issue leading to user information disclosure↗2022-12-15
▶
Apple
CVE-2022-46698: macOS Ventura 13.1↗2022-12-13
▶
Apple
CVE-2022-46698: watchOS 9.2↗2022-12-13
▶
Apple
CVE-2022-46698: iOS 16.2 and iPadOS 16.2↗2022-12-13
▶
CVE-2022-46698 (MEDIUM CVSS 6.5) | A logic issue was addressed with im | cvebase.io