PT-2022-21555 · Apple · Safari+3

18楼梦想改造家 + 1 · Published 2022-09-12 · Updated 2023-01-09 · CVE-2022-32892

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Safari versions prior to 16 iOS versions prior to 15.7 and 16 iPadOS versions prior to 15.7 macOS versions prior to Ventura 13

Description An access issue was addressed with improvements to the sandbox, which may allow a sandboxed process to circumvent sandbox restrictions.

Recommendations For Safari versions prior to 16, update to Safari 16. For iOS versions prior to 15.7 and 16, update to iOS 15.7 or iOS 16. For iPadOS versions prior to 15.7, update to iPadOS 15.7. For macOS versions prior to Ventura 13, update to macOS Ventura 13.

Fix

Related Identifiers

CVE-2022-32892

Affected Products

Apple Macos

Safari

Ios

Ipados

References · 12

• https://osv.dev/vulnerability/CVE-2022-32892 · Vendor Advisory
• https://support.apple.com/en-us/HT213442 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-32892 · Security Note
• https://ubuntu.com/security/CVE-2022-32892 · Vendor Advisory
• https://support.apple.com/en-us/HT213488 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-32892 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-32892 · Vendor Advisory
• https://support.apple.com/en-us/HT213445 · Vendor Advisory
• https://support.apple.com/en-us/HT213446 · Vendor Advisory
• https://support.apple.com/en-us/103245 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32892 · Note
• https://support.apple.com/en-us/102853 · Note