CVE-2022-26700

Published: Sep 23, 2022Modified: May 22, 2025

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to code execution.

Affected (6)

Products: Apple: Ipados, Iphone Os, Macos, Safari, Tvos, Watchos

6 products

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 15.5
Apple Iphone Os	Before 15.5
Apple Macos	From 12.0 to 12.4
Apple Safari	Before 15.5
Apple Tvos	Before 15.5
Apple Watchos	Before 8.6

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (10)

https://support.apple.com/en-us/HT213253

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213254

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213257

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213258

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213260

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213253