PT-2022-21554 · Apple+3 · Safari+7

Real_As3617 · Published 2022-08-16 · Updated 2023-05-30 · CVE-2022-32891

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Safari versions prior to 16 tvOS versions prior to 16 watchOS versions prior to 9 iOS versions prior to 16

Description The issue was addressed with improved UI handling. Visiting a website that frames malicious content may lead to UI spoofing.

Recommendations For Safari versions prior to 16, update to Safari 16 to resolve the issue. For tvOS versions prior to 16, update to tvOS 16 to resolve the issue. For watchOS versions prior to 9, update to watchOS 9 to resolve the issue. For iOS versions prior to 16, update to iOS 16 to resolve the issue.

Fix

Clickjacking

Weakness Enumeration

CWE-1021

Related Identifiers

CESA-2022_7704

CVE-2022-32891

DLA-3073-1

DSA-5210-1

DSA-5211-1

MGASA-2022-0346

RHSA-2022:7704

RHSA-2022:8054

RHSA-2022_7704

RHSA-2022_8054

RHSA-2025:10364

Affected Products

Astra Linux

Centos

Apple Macos

Red Hat

Safari

Ios

Tvos

Watchos

References · 24

• https://osv.dev/vulnerability/DEBIAN-CVE-2022-32891 · Vendor Advisory
• https://support.apple.com/en-us/HT213442 · Vendor Advisory
• https://support.apple.com/en-us/HT213486 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-32891 · Vendor Advisory
• https://security.gentoo.org/glsa/202305-32 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-32891 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5210-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2022-0346.html · Security Note
• https://osv.dev/vulnerability/DSA-5211-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-32891 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-32891 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2022-0346 · Vendor Advisory
• https://support.apple.com/en-us/HT213487 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-32891 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-32891 · Security Note