VulnerabilityModified
CVE-2022-46705
Visiting a malicious website may lead to address bar spoofing.
MEDIUM 4.3EPSS 0.97%
Does this matter?
Lower severity and a low EPSS score (0.97%). Track it; it rarely justifies an emergency change on its own.
Description
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, Safari 16.2. Visiting a malicious website may lead to address bar spoofing.
- CVSS 3.1
- 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
- EPSS
- 0.97% probability · 60th percentile
- CISA KEV
- Not listed
- Affected
- apple/safari · apple/ipados · apple/iphone os · apple/macos · apple/tvos · apple/watchos
- Source
- product-security@apple.com
References
- http://www.openwall.com/lists/oss-security/2023/11/15/1Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT213530Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213532Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213537Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213531Vendor Advisory
- https://support.apple.com/kb/HT213535Vendor Advisory
- https://support.apple.com/kb/HT213536Vendor Advisory
- https://support.apple.com/kb/HT213676Vendor Advisory
- http://www.openwall.com/lists/oss-security/2023/11/15/1Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT213530Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213532Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213537Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213531Vendor Advisory
- https://support.apple.com/kb/HT213535Vendor Advisory
- https://support.apple.com/kb/HT213536Vendor Advisory
- https://support.apple.com/kb/HT213676Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.