CVE-2022-42817

Опубликовано: 01 нояб. 2022

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16, watchOS 9.1. Visiting a maliciously crafted website may leak sensitive data.

Ссылки

https://support.apple.com/en-us/HT213489
Vendor Advisory
https://support.apple.com/en-us/HT213490
Vendor Advisory
https://support.apple.com/en-us/HT213491
Vendor Advisory
https://support.apple.com/en-us/HT213489
Vendor Advisory
https://support.apple.com/en-us/HT213490
Vendor Advisory
https://support.apple.com/en-us/HT213491
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 15.7.1 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 15.7.1 (исключая)

cpe:2.3:o:apple:iphone_os:16.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Версия до 9.1 (исключая)

EPSS

Процентиль: 61%

0.00408

Низкий

6.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-200

Связанные уязвимости

GHSA-mpfg-jjqj-fjqq