CVE-2022-32923
A correctness issue in the JIT was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose internal states of the app.
Published:Oct 31, 2022
Last Modified:May 6, 2025
EPS:Nov 1, 2022
EPSS Score:0.00194
CVSS Score:6.5
Affected Products
Vendor
Product
Action
Vendor
Apple
Product
Ipados
Apple
Ipados
Vendor
Apple
Product
Iphone Os
Apple
Iphone Os
Vendor
Apple
Product
Macos
Apple
Macos
Vendor
Apple
Product
Safari
Apple
Safari
Vendor
Apple
Product
Tvos
Apple
Tvos
Vendor
Apple
Product
Watchos
Apple
Watchos
Vendor
Redhat
Product
Enterprise Linux
Redhat
Enterprise Linux
Vendor
Redhat
Product
Rhel Els
Redhat
Rhel Els
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
