VulnerabilityModified
CVE-2022-42824
Processing maliciously crafted web content may disclose sensitive user information.
MEDIUM 5.5EPSS 0.34%
Does this matter?
Lower severity and a low EPSS score (0.34%). Track it; it rarely justifies an emergency change on its own.
Description
A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose sensitive user information.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- EPSS
- 0.34% probability · 27th percentile
- CISA KEV
- Not listed
- Affected
- apple/safari · apple/ipados · apple/iphone os · apple/macos · apple/tvos · apple/watchos · fedoraproject/fedora · debian/debian linux
- Source
- product-security@apple.com
References
- http://www.openwall.com/lists/oss-security/2022/11/04/4Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/11/msg00010.htmlMailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/
- https://security.gentoo.org/glsa/202305-32
- https://support.apple.com/en-us/HT213488Vendor Advisory
- https://support.apple.com/en-us/HT213489Vendor Advisory
- https://support.apple.com/en-us/HT213491Vendor Advisory
- https://support.apple.com/en-us/HT213492Vendor Advisory
- https://support.apple.com/en-us/HT213495Vendor Advisory
- https://www.debian.org/security/2022/dsa-5273Third Party Advisory
- https://www.debian.org/security/2022/dsa-5274Third Party Advisory
- http://www.openwall.com/lists/oss-security/2022/11/04/4Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/11/msg00010.htmlMailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/
- https://security.gentoo.org/glsa/202305-32
- https://support.apple.com/en-us/HT213488Vendor Advisory
- https://support.apple.com/en-us/HT213489Vendor Advisory
- https://support.apple.com/en-us/HT213491Vendor Advisory
- https://support.apple.com/en-us/HT213492Vendor Advisory
- https://support.apple.com/en-us/HT213495Vendor Advisory
- https://www.debian.org/security/2022/dsa-5273Third Party Advisory
- https://www.debian.org/security/2022/dsa-5274Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.