PT-2022-4804
CVE-2022-22662
·
Published
2022-03-14
·
Updated
2024-09-18
Description by
CVSS 2.0
7.1
HighMetricsAV:N/AC:M/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions
macOS versions prior to Big Sur 11.6.5
Security Update 2022-003 Catalina
Description
A cookie management issue was addressed with improved state management. Processing maliciously crafted web content may disclose sensitive user information. The issue is related to the WebKitGTK module and allows a remote attacker to access confidential data by exploiting the vulnerability.
Recommendations
For macOS versions prior to Big Sur 11.6.5, apply Security Update 2022-003 Catalina to fix the issue.
For other affected versions, update to macOS Big Sur 11.6.5 or later to resolve the vulnerability.
As a temporary workaround, consider restricting access to maliciously crafted web content until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾