CVE-2022-22629highCWE-787

CVE-2022-22629: high-severity vulnerability in Apple Safari

Published 23 Sep 2022 · Updated 22 May 2025

Follow this CVE + Monitor watchOS + Monitor tvOS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 5.0%

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Apple · Safari Apple · tvOS Apple · watchOS

Related CVEs — Apple Safari

In the same product, most dangerous first.

CVE-2021-30860HIGHCVE-2021-30860EPSS 76.0%KEV CVE-2023-32434HIGHCVE-2023-32434EPSS 51.5%KEV CVE-2023-28205HIGHCVE-2023-28205EPSS 27.1%KEV CVE-2025-43529HIGHCVE-2025-43529EPSS 25.7%KEV CVE-2023-32439HIGHCVE-2023-32439EPSS 24.0%KEV CVE-2023-32435HIGHCVE-2023-32435EPSS 23.0%KEV

References

https://support.apple.com/en-us/HT213182 https://support.apple.com/en-us/HT213183 https://support.apple.com/en-us/HT213186 https://support.apple.com/en-us/HT213187 https://support.apple.com/en-us/HT213188 https://support.apple.com/en-us/HT213193