CVE Vulnerabilities

CVE-2022-22637

Published: Sep 23, 2022 | Modified: Sep 28, 2022
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. A malicious website may cause unexpected cross-origin behavior.

Affected Software

Name Vendor Start Version End Version
Safari Apple * 15.4 (excluding)
Ipad_os Apple * 15.4 (excluding)
Iphone_os Apple * 15.4 (excluding)
Macos Apple 12.0 (including) 12.3 (excluding)
Tvos Apple * 15.4 (excluding)
Watchos Apple * 8.5 (excluding)

References