← back
CVE-2022-32923mediumCWE-79

CVE-2022-32923

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 1.0%
exploitation probability
1.0%top 39% of all CVEs
observed exploitation
nono source reports it
A correctness issue in the JIT was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose internal states of the app.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Apple · macOSApple · tvOSApple · watchOS
References
https://security.gentoo.org/glsa/202305-32https://support.apple.com/en-us/HT213488https://support.apple.com/en-us/HT213489https://support.apple.com/en-us/HT213490https://support.apple.com/en-us/HT213491https://support.apple.com/en-us/HT213492https://support.apple.com/en-us/HT213495http://www.openwall.com/lists/oss-security/2022/11/04/4