CVE-2022-42824

Description

A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose sensitive user information.

References

https://support.apple.com/en-us/HT213489

https://www.debian.org/security/2022/dsa-5274

https://www.debian.org/security/2022/dsa-5273

https://support.apple.com/en-us/HT213495

https://support.apple.com/en-us/HT213492

https://support.apple.com/en-us/HT213491

https://support.apple.com/en-us/HT213488

https://security.gentoo.org/glsa/202305-32

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/

https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html

http://www.openwall.com/lists/oss-security/2022/11/04/4

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3