CVE-2022-42823: high-severity vulnerability in Apple tvOS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.8epss 1.8%
A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Related CVEs — Apple tvOS
In the same product, most dangerous first.
References
https://lists.debian.org/debian-lts-announce/2022/11/msg00010.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/https://security.gentoo.org/glsa/202305-32https://support.apple.com/en-us/HT213488https://support.apple.com/en-us/HT213489https://support.apple.com/en-us/HT213491https://support.apple.com/en-us/HT213492https://support.apple.com/en-us/HT213495https://www.debian.org/security/2022/dsa-5273https://www.debian.org/security/2022/dsa-5274