A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.1.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.1..
References
Link | Resource |
---|---|
http://seclists.org/fulldisclosure/2022/Dec/21 | Mailing List Third Party Advisory |
http://seclists.org/fulldisclosure/2022/Dec/22 | Mailing List Third Party Advisory |
http://seclists.org/fulldisclosure/2022/Dec/23 | Mailing List Third Party Advisory |
http://seclists.org/fulldisclosure/2022/Dec/26 | Mailing List Third Party Advisory |
http://seclists.org/fulldisclosure/2022/Dec/28 | Mailing List Third Party Advisory |
http://www.openwall.com/lists/oss-security/2022/12/26/1 | Mailing List Third Party Advisory |
https://security.gentoo.org/glsa/202305-32 | |
https://support.apple.com/en-us/HT213516 | Release Notes Vendor Advisory |
https://support.apple.com/en-us/HT213531 | Release Notes Vendor Advisory |
https://support.apple.com/en-us/HT213532 | Release Notes Vendor Advisory |
https://support.apple.com/en-us/HT213535 | Release Notes Vendor Advisory |
https://support.apple.com/en-us/HT213537 | Release Notes Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
30 May 2023, 06:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
09 Jan 2023, 16:57
Type | Values Removed | Values Added |
---|---|---|
References | (MLIST) http://www.openwall.com/lists/oss-security/2022/12/26/1 - Mailing List, Third Party Advisory |
26 Dec 2022, 19:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
21 Dec 2022, 14:35
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-843 | |
First Time |
Apple ipados
Apple iphone Os Apple safari Apple macos Apple tvos Apple |
|
References | (FULLDISC) http://seclists.org/fulldisclosure/2022/Dec/23 - Mailing List, Third Party Advisory | |
References | (MISC) https://support.apple.com/en-us/HT213537 - Release Notes, Vendor Advisory | |
References | (FULLDISC) http://seclists.org/fulldisclosure/2022/Dec/22 - Mailing List, Third Party Advisory | |
References | (MISC) https://support.apple.com/en-us/HT213516 - Release Notes, Vendor Advisory | |
References | (MISC) https://support.apple.com/en-us/HT213531 - Release Notes, Vendor Advisory | |
References | (MISC) https://support.apple.com/en-us/HT213532 - Release Notes, Vendor Advisory | |
References | (MISC) https://support.apple.com/en-us/HT213535 - Release Notes, Vendor Advisory | |
References | (FULLDISC) http://seclists.org/fulldisclosure/2022/Dec/28 - Mailing List, Third Party Advisory | |
References | (FULLDISC) http://seclists.org/fulldisclosure/2022/Dec/26 - Mailing List, Third Party Advisory | |
References | (FULLDISC) http://seclists.org/fulldisclosure/2022/Dec/21 - Mailing List, Third Party Advisory | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
CPE | cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* |
21 Dec 2022, 06:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
15 Dec 2022, 19:56
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-12-15 19:15
Updated : 2023-12-10 14:48
NVD link : CVE-2022-42856
Mitre link : CVE-2022-42856
CVE.ORG link : CVE-2022-42856
JSON object : View
Products Affected
apple
- iphone_os
- tvos
- safari
- ipados
- macos
CWE
CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')