CVE-2022-22629highCWE-787

CVE-2022-22629: falha de alta gravidade em Apple Safari

Publicada em 23 set 2022 · Atualizada em 22 mai 2025

Seguir esta CVE + Monitorar watchOS + Monitorar tvOS

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.8epss 5.0%

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Produtos afetados

Apple · Safari Apple · tvOS Apple · watchOS

CVEs relacionadas — Apple Safari

No mesmo produto, das mais perigosas para as menos.

CVE-2021-30860HIGHCVE-2021-30860EPSS 76.0%KEV CVE-2023-32434HIGHCVE-2023-32434EPSS 51.5%KEV CVE-2023-28205HIGHCVE-2023-28205EPSS 27.1%KEV CVE-2025-43529HIGHCVE-2025-43529EPSS 25.7%KEV CVE-2023-32439HIGHCVE-2023-32439EPSS 24.0%KEV CVE-2023-32435HIGHCVE-2023-32435EPSS 23.0%KEV

Referências

https://support.apple.com/en-us/HT213182 https://support.apple.com/en-us/HT213183 https://support.apple.com/en-us/HT213186 https://support.apple.com/en-us/HT213187 https://support.apple.com/en-us/HT213188 https://support.apple.com/en-us/HT213193