QwikSec

Security Database

CVE

CWE

Training

CVE-2022-42837

Published: Dec 15, 2022

Modified: Apr 21, 2025

PUBLISHED

Description

An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, watchOS 9.2. A remote user may be able to cause unexpected app termination or arbitrary code execution.

Vendor	Product	Versions
Apple	macOS	affected `unspecified - < 13.1`
Apple	macOS	affected `unspecified - < 16.2`
Apple	macOS	affected `unspecified - < 15.7`
Apple	watchOS	affected `unspecified - < 9.2`

References

https://support.apple.com/kb/HT213535

https://support.apple.com/en-us/HT213532

https://support.apple.com/en-us/HT213530

https://support.apple.com/en-us/HT213531

https://support.apple.com/en-us/HT213536

20221220 APPLE-SA-2022-12-13-1 iOS 16.2 and iPadOS 16.2

mailing-list

20221220 APPLE-SA-2022-12-13-2 iOS 15.7.2 and iPadOS 15.7.2

mailing-list

20221220 APPLE-SA-2022-12-13-4 macOS Ventura 13.1

mailing-list

20221220 APPLE-SA-2022-12-13-8 watchOS 9.2

mailing-list

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.