6.5
Medium
CVE-2022-46698 A logic issue was addressed with improved checks
Description
A logic issue was addressed with improved checks. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may disclose sensitive user information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| iCloud for Windows 14.1 | earliest → < 14.1 | 14.1 |
| tvOS 16.2 | earliest → < 16.2 | 16.2 |
| watchOS 16.2 | earliest → < 16.2 | 16.2 |
References
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- 20221220 APPLE-SA-2022-12-13-1 iOS 16.2 and iPadOS 16.2 seclists.org
- 20221220 APPLE-SA-2022-12-13-4 macOS Ventura 13.1 seclists.org
- 20221220 APPLE-SA-2022-12-13-7 tvOS 16.2 seclists.org
- 20221220 APPLE-SA-2022-12-13-9 Safari 16.2 seclists.org
- 20221220 APPLE-SA-2022-12-13-8 watchOS 9.2 seclists.org
- security.gentoo.org security.gentoo.org
Timeline
- Published
- Last modified
Other CVEs of iCloud for Windows
The 181 CVEs of iCloud for Windows →
CVE-2022-46693
An out-of-bounds write issue was addressed with improved input validation
7.8
High
CVE-2022-46692
A logic issue was addressed with improved state management
5.5
Medium
CVE-2020-36521
An out-of-bounds read was addressed with improved input validation
7.1
High
CVE-2018-4302
A null pointer dereference was addressed with improved validation
Not rated