CVE-2022-42799

Description

The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Visiting a malicious website may lead to user interface spoofing.

References

https://support.apple.com/en-us/HT213489

https://www.debian.org/security/2022/dsa-5274

https://www.debian.org/security/2022/dsa-5273

https://support.apple.com/en-us/HT213495

https://support.apple.com/en-us/HT213492

https://support.apple.com/en-us/HT213491

https://support.apple.com/en-us/HT213488

https://security.gentoo.org/glsa/202305-32

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/

https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html

http://www.openwall.com/lists/oss-security/2022/11/04/4

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3