PT-2022-6262 · Apple+7 · Safari+10

Francisco Alonso + 1 · Published 2022-10-24 · Updated 2024-10-09 · CVE-2022-42826

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Safari versions prior to 16.1 macOS versions prior to Ventura 13 iOS versions prior to 16.1 iPadOS versions prior to 16

Description A use after free issue was addressed with improved memory management. Processing maliciously crafted web content may lead to arbitrary code execution. The issue is related to the use of memory after it has been freed when handling web content, which can be exploited by a remote attacker to execute arbitrary code.

Recommendations For Safari versions prior to 16.1, update to Safari 16.1 or later. For macOS versions prior to Ventura 13, update to macOS Ventura 13 or later. For iOS versions prior to 16.1, update to iOS 16.1 or later. For iPadOS versions prior to 16, update to iPadOS 16 or later.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2023:2256

ALSA-2023:2834

BDU:2023-00677

CESA-2023_2834

CVE-2022-42826

DLA-3308-1

DSA-5340-1

DSA-5341-1

MGASA-2023-0047

RHSA-2023:2256

RHSA-2023:2834

RHSA-2023_2256

RHSA-2023_2834

RHSA-2025:10364

SUSE-SU-2023:0397-1

SUSE-SU-2023:0489-1

SUSE-SU-2023:0490-1

SUSE-SU-2023:0573-1

SUSE-SU-2023:1681-1

USN-5867-1

Affected Products

Almalinux

Astra Linux

Centos

Linuxmint

Apple Macos

Red Hat

Safari

Suse

Ubuntu

Ios

Ipados

References · 108

• https://bdu.fstec.ru/vul/2023-00677 · Security Note
• https://osv.dev/vulnerability/DLA-3308-1 · Vendor Advisory
• https://security.gentoo.org/glsa/202305-32 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-42826 · Security Note
• https://support.apple.com/en-us/HT213488 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0316SE47MD · Vendor Advisory
• https://support.apple.com/en-us/HT213495 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2023:2834 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-42826 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-2256.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-42826 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5867-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-23517 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5340-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0489-1 · Vendor Advisory