CVE-2022-22620 — Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability

provenance: imported · CVE: CVE-2022-22620

CVE-2022-22620: Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Apple
Product	iOS, iPadOS, and macOS
Date added	2022-02-11
Due date	2022-02-25
Ransomware campaign use	Unknown

Description

Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2022-22620

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-22620
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog