CVE-2022-22589: falha em Apple watchOS
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 2.0%
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing a maliciously crafted mail message may lead to running arbitrary javascript.
CVEs relacionadas — Apple watchOS
No mesmo produto, das mais perigosas para as menos.
Referências
http://seclists.org/fulldisclosure/2022/May/33http://seclists.org/fulldisclosure/2022/May/35https://security.gentoo.org/glsa/202208-39https://support.apple.com/en-us/HT213053https://support.apple.com/en-us/HT213054https://support.apple.com/en-us/HT213057https://support.apple.com/en-us/HT213058https://support.apple.com/en-us/HT213059https://support.apple.com/kb/HT213185https://support.apple.com/kb/HT213255https://support.apple.com/kb/HT213256