VDB
CISA-2022-46699
CISA-2022-46699
PUBLISHED
CVSS 8.8 HIGH
Reported by apple · Published December 15, 2022
A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Risk Scores
CVSS 3.1
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | tvOS | unspecified |
| Apple | tvOS | unspecified |
| Apple | tvOS | unspecified |
| Apple | watchOS | unspecified |
| Apple | watchOS | unspecified |
| Apple | tvOS | *, unspecified, unspecified |
| Apple | watchOS | unspecified, unspecified, * |
Timeline
- Dec 15, 2022 CVE Published
- Apr 21, 2025 CVE Updated
References
- 20221220 APPLE-SA-2022-12-13-1 iOS 16.2 and iPadOS 16.2 mailing-list
- 20221220 APPLE-SA-2022-12-13-4 macOS Ventura 13.1 mailing-list
- 20221220 APPLE-SA-2022-12-13-7 tvOS 16.2 mailing-list
- 20221220 APPLE-SA-2022-12-13-9 Safari 16.2 mailing-list
- 20221220 APPLE-SA-2022-12-13-8 watchOS 9.2 mailing-list