QwikSec

Security Database

CVE

CWE

Training

CVE-2022-42867

Published: Dec 15, 2022

Modified: Apr 21, 2025

PUBLISHED

Description

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor	Product	Versions
Apple	tvOS	affected `unspecified - < 16.2`
Apple	tvOS	affected `unspecified - < 13.1`
Apple	tvOS	affected `unspecified - < 16.2`
Apple	watchOS	affected `unspecified - < 9.2`
Apple	watchOS	affected `unspecified - < 16.2`

References

https://support.apple.com/en-us/HT213535

https://support.apple.com/en-us/HT213532

https://support.apple.com/en-us/HT213530

https://support.apple.com/en-us/HT213536

https://support.apple.com/en-us/HT213537

20221220 APPLE-SA-2022-12-13-1 iOS 16.2 and iPadOS 16.2

mailing-list

20221220 APPLE-SA-2022-12-13-4 macOS Ventura 13.1

mailing-list

20221220 APPLE-SA-2022-12-13-7 tvOS 16.2

mailing-list

20221220 APPLE-SA-2022-12-13-9 Safari 16.2

mailing-list

20221220 APPLE-SA-2022-12-13-8 watchOS 9.2

mailing-list

[oss-security] 20221226 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0011

mailing-list

https://security.gentoo.org/glsa/202305-32

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.