CVE-2022-42799

MEDIUM 6.1CVE-2022-42799 · Published 01/11/2022 · updated 17/06/2026

In short

CVE-2022-42799 is a MEDIUM (CVSS 6.1) vulnerability affecting safari (apple).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 76.8% of all vulnerabilities.
Fix: update to 16.1 or later.

Package	Affected versions	Patched versions
safari apple	`< 16.1`	`16.1`

Description

The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Visiting a malicious website may lead to user interface spoofing.

References

openwall.com/lists/oss-security/2022/11/04/4 · Mailing List
lists.debian.org/debian-lts-announce/2022/11/msg00010.html · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ
security.gentoo.org/glsa/202305-32
support.apple.com/en-us/HT213488 · Release Notes
support.apple.com/en-us/HT213489 · Release Notes
support.apple.com/en-us/HT213491 · Release Notes
support.apple.com/en-us/HT213492 · Release Notes

More vulnerabilities in safari

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free