CVE-2022-32868

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-32868
A logic issue was addressed with improved state management. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. A website may be able to track users through Safari web extensions.

4.3 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://support.apple.com/en-us/HT213442 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213445 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213446 Release Notes Vendor Advisory
http://seclists.org/fulldisclosure/2022/Oct/39 Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2022/Oct/40 Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2022/Oct/50 Mailing List Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
History

08 Dec 2022, 03:34

Type Values Removed Values Added
References (FULLDISC) http://seclists.org/fulldisclosure/2022/Oct/39 - (FULLDISC) http://seclists.org/fulldisclosure/2022/Oct/39 - Mailing List, Third Party Advisory
References (FULLDISC) http://seclists.org/fulldisclosure/2022/Oct/50 - (FULLDISC) http://seclists.org/fulldisclosure/2022/Oct/50 - Mailing List, Third Party Advisory
References (FULLDISC) http://seclists.org/fulldisclosure/2022/Oct/40 - (FULLDISC) http://seclists.org/fulldisclosure/2022/Oct/40 - Mailing List, Third Party Advisory

31 Oct 2022, 00:15

Type Values Removed Values Added
References
  • (FULLDISC) http://seclists.org/fulldisclosure/2022/Oct/50 -

30 Oct 2022, 23:15

Type Values Removed Values Added
References
  • (FULLDISC) http://seclists.org/fulldisclosure/2022/Oct/40 -
  • (FULLDISC) http://seclists.org/fulldisclosure/2022/Oct/39 -

22 Sep 2022, 16:56

Type Values Removed Values Added
CPE cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
First Time Apple iphone Os
Apple ipados
Apple safari
Apple
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.3
References (MISC) https://support.apple.com/en-us/HT213442 - (MISC) https://support.apple.com/en-us/HT213442 - Release Notes, Vendor Advisory
References (MISC) https://support.apple.com/en-us/HT213445 - (MISC) https://support.apple.com/en-us/HT213445 - Release Notes, Vendor Advisory
References (MISC) https://support.apple.com/en-us/HT213446 - (MISC) https://support.apple.com/en-us/HT213446 - Release Notes, Vendor Advisory
CWE NVD-CWE-noinfo

20 Sep 2022, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2022-09-20 21:15

Updated : 2022-12-08 03:34

NVD link : CVE-2022-32868

Mitre link : CVE-2022-32868

CVE.ORG link : CVE-2022-32868

JSON object : View

Products Affected

apple

  • iphone_os
  • safari
  • ipados
CWE
NVD-CWE-noinfo