CVE-2022-22610
Last modified
CVE-2022-22610 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. EPSS estimates a 0.97% chance of exploitation in the next 30 days.
Description
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to code execution.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apple | Safari | < 15.4 |
| Apple | Ipad Os | < 15.4 |
| Apple | Iphone Os | < 15.4 |
| Apple | Macos | >= 12.0, < 12.3 |
| Apple | Tvos | < 15.4 |
| Apple | Watchos | < 8.5 |
References
- https://support.apple.com/en-us/HT213182Vendor Advisory
- https://support.apple.com/en-us/HT213183Vendor Advisory
- https://support.apple.com/en-us/HT213186Vendor Advisory
- https://support.apple.com/en-us/HT213187Vendor Advisory
- https://support.apple.com/en-us/HT213193Vendor Advisory
- https://support.apple.com/en-us/HT213182Vendor Advisory
- https://support.apple.com/en-us/HT213183Vendor Advisory
- https://support.apple.com/en-us/HT213186Vendor Advisory
- https://support.apple.com/en-us/HT213187Vendor Advisory
- https://support.apple.com/en-us/HT213193Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-22610?
How severe is CVE-2022-22610?
How do I fix CVE-2022-22610?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-22605An out-of-bounds read was addressed with improved bounds che…7.8
- CVE-2022-22606An out-of-bounds read was addressed with improved bounds che…7.8
- CVE-2022-22607An out-of-bounds read was addressed with improved bounds che…7.8
- CVE-2022-22608An out-of-bounds read was addressed with improved bounds che…7.8
- CVE-2022-22609The issue was addressed with additional permissions checks. …7.5
- CVE-2022-2261The WPIDE WordPress plugin before 3.0 does not sanitize and …7.2
- CVE-2022-22611An out-of-bounds read was addressed with improved input vali…7.8
- CVE-2022-22612A memory consumption issue was addressed with improved memor…7.8
- CVE-2022-22613An out-of-bounds write issue was addressed with improved bou…7.8
- CVE-2022-22614A use after free issue was addressed with improved memory ma…7.8
- CVE-2022-22615A use after free issue was addressed with improved memory ma…7.8
- CVE-2022-22616This issue was addressed with improved checks. This issue is…5.5
Are you affected by CVE-2022-22610?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
