← Voltar para CVEs

CVE-2022-42837

CRITICAL

9.8

Descricao

An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, watchOS 9.2. A remote user may be able to cause unexpected app termination or arbitrary code execution.

Detalhes CVE

Pontuacao CVSS v3.19.8

SeveridadeCRITICAL

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado12/15/2022

Ultima modificacao4/21/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

apple:ipadosapple:iphone_osapple:macosapple:watchos

Fraquezas (CWE)

CWE-20

Referencias

http://seclists.org/fulldisclosure/2022/Dec/20(product-security@apple.com)

http://seclists.org/fulldisclosure/2022/Dec/21(product-security@apple.com)

http://seclists.org/fulldisclosure/2022/Dec/23(product-security@apple.com)

http://seclists.org/fulldisclosure/2022/Dec/27(product-security@apple.com)

https://support.apple.com/en-us/HT213530(product-security@apple.com)

https://support.apple.com/en-us/HT213531(product-security@apple.com)

https://support.apple.com/en-us/HT213532(product-security@apple.com)

https://support.apple.com/en-us/HT213536(product-security@apple.com)

https://support.apple.com/kb/HT213535(product-security@apple.com)

http://seclists.org/fulldisclosure/2022/Dec/20(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2022/Dec/21(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2022/Dec/23(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2022/Dec/27(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT213530(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT213531(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT213532(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT213536(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/kb/HT213535(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.