CVE-2022-46696

高危 8.8CVE-2022-46696 · Published 15/12/2022 · updated 17/06/2026

要点

CVE-2022-46696 是影响 safari (apple) 的高危 (CVSS 8.8)漏洞。
未来 30 天内被利用的概率（EPSS）：1.3%，高于 71.5% 的漏洞。
修复：升级到 16.2 或更高版本。

Package	Affected versions	Patched versions
safari apple	`< 16.2`	`16.2`

Description

A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.

References

seclists.org/fulldisclosure/2022/Dec/20 · Mailing List
seclists.org/fulldisclosure/2022/Dec/23 · Mailing List
seclists.org/fulldisclosure/2022/Dec/26 · Mailing List
seclists.org/fulldisclosure/2022/Dec/27 · Mailing List
seclists.org/fulldisclosure/2022/Dec/28 · Mailing List
support.apple.com/en-us/HT213530 · Release Notes
support.apple.com/en-us/HT213532 · Release Notes
support.apple.com/en-us/HT213535 · Release Notes
support.apple.com/en-us/HT213536 · Release Notes
support.apple.com/en-us/HT213537 · Release Notes

safari 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

safari

apple

< 16.2

16.2

safari 的其他漏洞

查看全部 →