PT-2022-15602 · Apple · Safari+2

Abdullah Md Shaleh · Published 2022-03-15 · Updated 2023-08-08 · CVE-2022-22654

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 8.5 Safari versions prior to 15.4

Description A user interface issue was addressed, which could allow address bar spoofing when visiting a malicious website.

Recommendations For watchOS versions prior to 8.5, update to watchOS 8.5 to resolve the issue. For Safari versions prior to 15.4, update to Safari 15.4 to resolve the issue.

Fix

Related Identifiers

CVE-2022-22654

Affected Products

Apple Macos

Safari

Watchos

References · 6

• https://osv.dev/vulnerability/CVE-2022-22654 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22654 · Security Note
• https://support.apple.com/en-us/HT213187 · Vendor Advisory
• https://support.apple.com/en-us/HT213193 · Vendor Advisory
• https://support.apple.com/en-us/103193 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22654 · Note