A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose sensitive user information.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Apple
  • Ipados
  • Iphone Os
  • Macos
  • Safari
  • Tvos
  • Watchos
Debian
  • Debian Linux
Fedoraproject
  • Fedora
Redhat
  • Enterprise Linux
  • Rhel Els

Configuration 1 [-]

OR cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Configuration 2 [-]

OR cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

Configuration 3 [-]

OR cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 7 Extended Lifecycle Support
webkitgtk4-0:2.48.3-2.el7_9 cpe:/o:redhat:rhel_els:7 RHSA-2025:10364 2025-07-07T00:00:00Z
Red Hat Enterprise Linux 8
webkit2gtk3-0:2.38.5-1.el8 cpe:/a:redhat:enterprise_linux:8 RHSA-2023:2834 2023-05-16T00:00:00Z
Red Hat Enterprise Linux 9
webkit2gtk3-0:2.38.5-1.el9 cpe:/a:redhat:enterprise_linux:9 RHSA-2023:2256 2023-05-09T00:00:00Z
References
Link Providers
http://www.openwall.com/lists/oss-security/2022/11/04/4 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html cve-icon cve-icon
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/ cve-icon cve-icon
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/ cve-icon cve-icon
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/ cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-42824 cve-icon
https://security.gentoo.org/glsa/202305-32 cve-icon cve-icon
https://support.apple.com/en-us/HT213488 cve-icon cve-icon
https://support.apple.com/en-us/HT213489 cve-icon cve-icon
https://support.apple.com/en-us/HT213491 cve-icon cve-icon
https://support.apple.com/en-us/HT213492 cve-icon cve-icon
https://support.apple.com/en-us/HT213495 cve-icon cve-icon
https://webkitgtk.org/security/WSA-2022-0010.html cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-42824 cve-icon
https://www.debian.org/security/2022/dsa-5273 cve-icon cve-icon
https://www.debian.org/security/2022/dsa-5274 cve-icon cve-icon
History

Mon, 07 Jul 2025 14:15:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel Els
CPEs cpe:/o:redhat:rhel_els:7
Vendors & Products Redhat rhel Els

Mon, 21 Apr 2025 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published: 2022-11-01T00:00:00.000Z

Updated: 2025-04-21T15:32:51.273Z

Reserved: 2022-10-11T00:00:00.000Z

Link: CVE-2022-42824

cve-icon Vulnrichment

Updated: 2024-08-03T13:19:04.809Z

cve-icon NVD

Status : Modified

Published: 2022-11-01T20:15:24.167

Modified: 2025-04-21T16:15:51.440

Link: CVE-2022-42824

cve-icon Redhat

Severity : Moderate

Publid Date: 2022-10-31T00:00:00Z

Links: CVE-2022-42824 - Bugzilla