CVE-2022-42799: medium-severity vulnerability in Apple tvOS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A malicious website can trick users by displaying fake interface elements that look like legitimate parts of the browser or system, potentially deceiving them into clicking on harmful content or entering sensitive information.
UI spoofing vulnerability in Safari and Apple OS browsers allowing attackers to overlay or manipulate interface elements through malicious websites; requires user interaction with the affected site and impacts user trust through presentation of deceptive UI components; mitigated through improved UI validation and rendering controls.
In the same product, most dangerous first.