Published: 24/08/2022 Updated: 07/11/2023

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 0

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple safari
apple ipados
apple iphone os
apple macos
fedoraproject fedora 35
fedoraproject fedora 36
debian debian linux 10.0
debian debian linux 11.0
webkitgtk webkitgtk
wpewebkit wpe webkit

Synopsis Moderate: webkit2gtk3 security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated this update as hav ...

Synopsis Moderate: webkit2gtk3 security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as hav ...

The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2022-32893 An anonymous researcher discovered that processing maliciously crafted web content may lead to arbitrary code execution Apple is aware of a report that this issue may have been actively exploited For the stable distribution (bullseye), ...

The following vulnerabilities have been discovered in the WPE WebKit web engine: CVE-2022-32893 An anonymous researcher discovered that processing maliciously crafted web content may lead to arbitrary code execution Apple is aware of a report that this issue may have been actively exploited For the stable distribution (bullseye) ...

An out-of-bounds write issue was addressed with improved bounds checking This issue is fixed in iOS 1561 and iPadOS 1561, macOS Monterey 1251, Safari 1561 Processing maliciously crafted web content may lead to arbitrary code execution Apple is aware of a report that this issue may have been actively exploited ...

Severity Unknown Remote Unknown Type Unknown Description AVG-2820 wpewebkit 2367-1 2368-1 Unknown Unknown AVG-2819 webkit2gtk 2367-1 2368-1 Unknown Unknown ...

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the Apple security updates page Apple security documents reference vulnerabilities by CVE-ID&nbsp ...

CWE-787 https://support.apple.com/en-us/HT213414 https://support.apple.com/en-us/HT213412 https://support.apple.com/en-us/HT213413 http://www.openwall.com/lists/oss-security/2022/08/25/5 http://www.openwall.com/lists/oss-security/2022/08/26/2 https://www.debian.org/security/2022/dsa-5219 https://www.debian.org/security/2022/dsa-5220 http://www.openwall.com/lists/oss-security/2022/08/29/1 http://www.openwall.com/lists/oss-security/2022/08/29/2 https://lists.debian.org/debian-lts-announce/2022/08/msg00019.html https://security.gentoo.org/glsa/202208-39 http://seclists.org/fulldisclosure/2022/Aug/16 http://www.openwall.com/lists/oss-security/2022/09/02/10 http://www.openwall.com/lists/oss-security/2022/09/13/1 http://seclists.org/fulldisclosure/2022/Oct/49 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7SETAAXEPGNBMYKTUDFEZHS5LGSQ64QL/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YKJGV2EXVMYQW3OAJNI4WUTKKVMD2YYK/https://access.redhat.com/errata/RHSA-2022:6634 https://nvd.nist.gov https://www.debian.org/security/2022/dsa-5219

CVE-2022-32893

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect