Not rated
CVE-2022-32868 A logic issue was addressed with improved state management
Description
A logic issue was addressed with improved state management. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. A website may be able to track users through Safari web extensions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| iOS 16 | earliest → < 16 | 16 |
| Safari 16 | earliest → < 16 | 16 |
| iOS and iPadOS 15.7 | earliest → < 15.7 | 15.7 |
References
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- 20221030 APPLE-SA-2022-10-27-3 Additional information for APPLE-SA-2022-09-12-1 iOS 16 seclists.org
- 20221030 APPLE-SA-2022-10-27-4 Additional information for APPLE-SA-2022-09-12-2 iOS 15.7 and iPadOS 15.7 seclists.org
- 20221030 APPLE-SA-2022-10-27-14 Additional information for APPLE-SA-2022-09-12-5 Safari 16 seclists.org
Timeline
- Published
- Last modified
Other CVEs of iOS
The 507 CVEs of iOS →
CVE-2024-44229
An information leakage was addressed with additional validation
5.3
Medium
CVE-2024-44218
This issue was addressed with improved checks
7.8
High
CVE-2024-40867
A custom URL scheme handling issue was addressed with improved input validation
8.8
High
CVE-2024-44259
This issue was addressed through improved state management
8.8
High