CVE-2022-42824 | Vulnerability Database | Aqua Security

A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose sensitive user information.

Affected Software

Name	Vendor	Start Version	End Version
Safari	Apple	*	16.1 (excluding)
Ipados	Apple	*	16.0 (excluding)
Iphone_os	Apple	*	16.1 (excluding)
Macos	Apple	*	13.0 (excluding)
Tvos	Apple	*	16.1 (excluding)
Watchos	Apple	*	9.1 (excluding)

References

http://www.openwall.com/lists/oss-security/2022/11/04/4
https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/
https://security.gentoo.org/glsa/202305-32
https://support.apple.com/en-us/HT213488
https://support.apple.com/en-us/HT213489
https://support.apple.com/en-us/HT213491
https://support.apple.com/en-us/HT213492
https://support.apple.com/en-us/HT213495
https://www.debian.org/security/2022/dsa-5273
https://www.debian.org/security/2022/dsa-5274

NVD	https://nvd.nist.gov/vuln/detail/CVE-2022-42824
CWE	https://cwe.mitre.org/data/definitions/.html