PT-2022-2641

CVE-2022-26717

·

Published

2022-04-22

·

Updated

2022-11-22

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 15.5 Apple tvOS versions prior to 15.5 Apple watchOS versions prior to 8.6 Apple iOS versions prior to 15.5 Apple iPadOS versions prior to 15.5 Apple macOS Monterey versions prior to 12.4 Apple iTunes for Windows versions prior to 12.12.4
Description A use after free issue was addressed with improved memory management. This issue may lead to arbitrary code execution when processing maliciously crafted web content. The vulnerability is related to the WebKit browser module and allows a remote attacker to execute arbitrary code by exploiting the use after free possibility.
Recommendations For Apple Safari versions prior to 15.5, update to version 15.5 or later. For Apple tvOS versions prior to 15.5, update to version 15.5 or later. For Apple watchOS versions prior to 8.6, update to version 8.6 or later. For Apple iOS versions prior to 15.5, update to version 15.5 or later. For Apple iPadOS versions prior to 15.5, update to version 15.5 or later. For Apple macOS Monterey versions prior to 12.4, update to version 12.4 or later. For Apple iTunes for Windows versions prior to 12.12.4, update to version 12.12.4 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALSA-2022:7704
ALSA-2022:8054
ALT-PU-2022-1740
ALT-PU-2022-2162
CESA-2022_7704
DSA-5154-1
DSA-5155-1
ELSA-2022-7704
ELSA-2022-8054
OPENSUSE-SU-2022_2071-1
OPENSUSE-SU-2022_2072-1
RHSA-2022:7704
RHSA-2022_7704
RHSA-2022:8054
RHSA-2022_8054
RHSA-2025:10364
RLSA-2022:7704
RLSA-2022_7704
RLSA-2022:8054
RLSA-2022_8054
SUSE-SU-2022:2030-1
SUSE-SU-2022_2030-1
SUSE-SU-2022:2071-1
SUSE-SU-2022_2071-1
SUSE-SU-2022:2072-1
SUSE-SU-2022_2072-1
SUSE-SU-2022:2089-1
SUSE-SU-2022_2089-1
USN-5457-1
Found an issue in the description? Have something to add? Feel free to write us 👾