CVE-2022-42799

The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Visiting a malicious website may lead to user interface spoofing.

• CWE-1021
• CWE-1021

• http://www.openwall.com/lists/oss-security/2022/11/04/4Mailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00010.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/
• https://security.gentoo.org/glsa/202305-32
• https://support.apple.com/en-us/HT213488Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213489Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213491Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213492Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213495Release Notes, Vendor Advisory
• https://www.debian.org/security/2022/dsa-5273Third Party Advisory
• https://www.debian.org/security/2022/dsa-5274Third Party Advisory
• http://www.openwall.com/lists/oss-security/2022/11/04/4Mailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00010.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/
• https://security.gentoo.org/glsa/202305-32
• https://support.apple.com/en-us/HT213488Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213489Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213491Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213492Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213495Release Notes, Vendor Advisory
• https://www.debian.org/security/2022/dsa-5273Third Party Advisory
• https://www.debian.org/security/2022/dsa-5274Third Party Advisory

Published

Nov 1, 2022

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-42793An issue in code signature validation was addressed with imp…5.5
• CVE-2022-42794Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-42795A memory consumption issue was addressed with improved memor…8.8
• CVE-2022-42796This issue was addressed by removing the vulnerable code. Th…7.8
• CVE-2022-42797An injection issue was addressed with improved input validat…7.8
• CVE-2022-42798The issue was addressed with improved memory handling. This …5.5
• CVE-2022-4280A vulnerability, which was classified as problematic, has be…7.5
• CVE-2022-42800This issue was addressed with improved checks. This issue is…7.8
• CVE-2022-42801A logic issue was addressed with improved checks. This issue…7.8
• CVE-2022-42802Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-42803A race condition was addressed with improved locking. This i…7
• CVE-2022-42804Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…