CVE-2022-22590

HOCH 8.8CVE-2022-22590 · Published 18/03/2022 · updated 17/06/2026

Kurz gesagt

CVE-2022-22590 ist eine Schwachstelle (HOCH (CVSS 8.8)) in safari (apple), webkitgtk (webkitgtk).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.6%, höher als bei 75.2% aller Schwachstellen.
Abhilfe: auf 15.3, 2.36.7 oder neuer aktualisieren.

Package	Affected versions	Patched versions
safari apple	`< 15.3`	`15.3`
webkitgtk webkitgtk	`< 2.36.7`	`2.36.7`

Description

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may lead to arbitrary code execution.

References

security.gentoo.org/glsa/202208-39 · Third Party Advisory
support.apple.com/en-us/HT213053 · Vendor Advisory
support.apple.com/en-us/HT213054 · Vendor Advisory
support.apple.com/en-us/HT213057 · Vendor Advisory
support.apple.com/en-us/HT213058 · Vendor Advisory
support.apple.com/en-us/HT213059 · Vendor Advisory

Weitere Schwachstellen in safari

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

safari

apple

< 15.3

15.3

webkitgtk

< 2.36.7

2.36.7

Weitere Schwachstellen in safari

Alle anzeigen →