CVE-2022-32912
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.8epss 1.5%
exploitation probability
1.5%top 28% of all CVEs
observed exploitation
nono source reports it
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References
http://seclists.org/fulldisclosure/2022/Oct/28http://seclists.org/fulldisclosure/2022/Oct/39http://seclists.org/fulldisclosure/2022/Oct/40http://seclists.org/fulldisclosure/2022/Oct/41http://seclists.org/fulldisclosure/2022/Oct/47http://seclists.org/fulldisclosure/2022/Oct/49http://seclists.org/fulldisclosure/2022/Oct/50https://support.apple.com/en-us/HT213442https://support.apple.com/en-us/HT213445https://support.apple.com/en-us/HT213446