CVE-2022-42867

Severity

HIGH

CVSS

8.8

EPSS

0.34574

Risk score

47.3

CISA KEV

PoC

Published

2022-12-15

Modified

2025-04-21

First seen

2026-08-07

Aliases

EUVD-2022-45930, GHSA-JHMJ-WHJ3-74PR

Products

Apple:tvOS unspecified <13.1, Apple:tvOS unspecified <16.2, Apple:watchOS unspecified <16.2, Apple:watchOS unspecified <9.2

Sources

euvd EUVD-2022-45930

Description

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-45930
https://support.apple.com/en-us/HT213535
https://support.apple.com/en-us/HT213532
https://support.apple.com/en-us/HT213530
https://support.apple.com/en-us/HT213536
https://support.apple.com/en-us/HT213537
http://seclists.org/fulldisclosure/2022/Dec/20
http://seclists.org/fulldisclosure/2022/Dec/23
http://seclists.org/fulldisclosure/2022/Dec/26
http://seclists.org/fulldisclosure/2022/Dec/28
http://seclists.org/fulldisclosure/2022/Dec/27
http://www.openwall.com/lists/oss-security/2022/12/26/1
https://security.gentoo.org/glsa/202305-32