Apple Safari 15.3-CVE-2022-22620
NAME
Apple – Multiple
- Platforms Affected:
Multiple - Risk Level:
medium - CVE Type:
Use after free
DESCRIPTION
CVE-2022-22620 is a use after free vulnerability impacting Apple macOS Monterey versions 12.2 and earlier, Apple iOS versions 15.3 and iPadOS 15.3 and earlier, and Apple Safari versions 15.3 and earlier. A proof of concept (PoC) was not observed publicly or in the underground. Apple claimed to be aware of the vulnerability being actively exploited in the wild.
CVSS Information:
- CVSS 2.0 SCORE:
- CVSS 3.0 SCORE:
- Exploit Disclosed in the Public:
true - Exploit Weaponised:
true - PoC Link:
hXXps://support[.]apple[.]com/en-gb/HT213091
MITIGATION
Apple addressed the vulnerability in multiple security advisories with updated versions.
- Reference Link:
https://support.apple.com/en-gb/HT213091 - Patch Available:
available
If you like the site, please consider joining the telegram channel and supporting us on Patreon using the button below.