← CVE Radar
CVE-2022-42856Apple iOS Type Confusion Vulnerability
A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.1.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.1..
8.8 HIGHEPSS 8.52%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.8 | HIGH | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
CISA required action
⚡ Known exploited · remediation due Jan 4, 2023
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2022-42856
- Status
- Analyzed
- Assigner (CNA)
- apple
- Published
- Dec 15, 2022
- Last modified
- 2026-06-17 05:05 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
AppletvOS1 version range
- before 16.2
AppletvOS1 version range
- before 13.1
AppletvOS1 version range
- before 15.7
AppletvOS1 version range
- before 16.1
AppletvOS1 version range
- before 16.2
References
- seclists.org http://seclists.org/fulldisclosure/2022/Dec/21
- seclists.org http://seclists.org/fulldisclosure/2022/Dec/22
- seclists.org http://seclists.org/fulldisclosure/2022/Dec/23
- seclists.org http://seclists.org/fulldisclosure/2022/Dec/26
- seclists.org http://seclists.org/fulldisclosure/2022/Dec/28
- openwall.com http://www.openwall.com/lists/oss-security/2022/12/26/1
- security.gentoo.org https://security.gentoo.org/glsa/202305-32
- support.apple.com https://support.apple.com/en-us/HT213516
- support.apple.com https://support.apple.com/en-us/HT213531
- support.apple.com https://support.apple.com/en-us/HT213532
- support.apple.com https://support.apple.com/en-us/HT213535
- support.apple.com https://support.apple.com/en-us/HT213537
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-42856