CVE-2022-42824

Published: Nov 1, 2022Modified: Apr 21, 2025

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose sensitive user information.

Affected (11)

Products: Apple: Ipados, Iphone Os, Macos, Safari, Tvos, Watchos · Fedoraproject: Fedora · Debian: Debian Linux

6 products

1 product

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 16.0
Apple Iphone Os	Before 16.1
Apple Macos	Before 13.0
Apple Safari	Before 16.1
Apple Tvos	Before 16.1
Apple Watchos	Before 9.1

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 35
Fedoraproject Fedora	Version 36
Fedoraproject Fedora	Version 37

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 11.0

References (26)

http://www.openwall.com/lists/oss-security/2022/11/04/4

Source: product-security@apple.com

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html

Source: product-security@apple.com

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/

Source: product-security@apple.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/

Source: product-security@apple.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/

Source: product-security@apple.com

https://security.gentoo.org/glsa/202305-32

Source: product-security@apple.com

https://support.apple.com/en-us/HT213488

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213489

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213491

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213492

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213495

Source: product-security@apple.com

Vendor Advisory

https://www.debian.org/security/2022/dsa-5273

Source: product-security@apple.com

Third Party Advisory

https://www.debian.org/security/2022/dsa-5274

Source: product-security@apple.com

Third Party Advisory

http://www.openwall.com/lists/oss-security/2022/11/04/4