5.5
Medium
CVE-2022-46692 A logic issue was addressed with improved state management
Description
A logic issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may bypass Same Origin Policy.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| iCloud for Windows 14.1 | earliest → < 14.1 | 14.1 |
| tvOS 15.7 | earliest → < 15.7 | 15.7 |
| watchOS 16.2 | earliest → < 16.2 | 16.2 |
References
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- 20221220 APPLE-SA-2022-12-13-1 iOS 16.2 and iPadOS 16.2 seclists.org
- 20221220 APPLE-SA-2022-12-13-2 iOS 15.7.2 and iPadOS 15.7.2 seclists.org
- 20221220 APPLE-SA-2022-12-13-4 macOS Ventura 13.1 seclists.org
- 20221220 APPLE-SA-2022-12-13-7 tvOS 16.2 seclists.org
- 20221220 APPLE-SA-2022-12-13-9 Safari 16.2 seclists.org
- security.gentoo.org security.gentoo.org
Timeline
- Published
- Last modified
Other CVEs of iCloud for Windows
The 181 CVEs of iCloud for Windows →
CVE-2022-46698
A logic issue was addressed with improved checks
6.5
Medium
CVE-2022-46693
An out-of-bounds write issue was addressed with improved input validation
7.8
High
CVE-2020-36521
An out-of-bounds read was addressed with improved input validation
7.1
High
CVE-2018-4302
A null pointer dereference was addressed with improved validation
Not rated