Apple Multiple Products Unspecified Vulnerability

HIGH 8.8EXPLOITED (CISA KEV)CVE-2022-48503 · Published 14/08/2023 · updated 17/06/2026

Apple Multiple Products Unspecified Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 20/10/2025. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
safari apple	`< 15.6`	`15.6`

Description

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution.

References

support.apple.com/en-us/HT213340 · Release Notes
support.apple.com/en-us/HT213341 · Release Notes
support.apple.com/en-us/HT213342 · Release Notes
support.apple.com/en-us/HT213345 · Release Notes
support.apple.com/en-us/HT213346 · Release Notes
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2022-48503

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free