VulnerabilityModified
CVE-2022-22590
A use after free issue was addressed with improved memory management.
HIGH 8.8EPSS 1.55%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.55%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may lead to arbitrary code execution.
- CVSS 3.1
- 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 1.55% probability · 74th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-416
- Affected
- apple/safari · apple/ipados · apple/iphone os · apple/macos · apple/tvos · apple/watchos · webkitgtk/webkitgtk
- Source
- product-security@apple.com
References
- https://security.gentoo.org/glsa/202208-39Third Party Advisory
- https://support.apple.com/en-us/HT213053Vendor Advisory
- https://support.apple.com/en-us/HT213054Vendor Advisory
- https://support.apple.com/en-us/HT213057Vendor Advisory
- https://support.apple.com/en-us/HT213058Vendor Advisory
- https://support.apple.com/en-us/HT213059Vendor Advisory
- https://security.gentoo.org/glsa/202208-39Third Party Advisory
- https://support.apple.com/en-us/HT213053Vendor Advisory
- https://support.apple.com/en-us/HT213054Vendor Advisory
- https://support.apple.com/en-us/HT213057Vendor Advisory
- https://support.apple.com/en-us/HT213058Vendor Advisory
- https://support.apple.com/en-us/HT213059Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.