QwikSec

Security Database

CVE

CWE

Training

CVE-2022-46692

Published: Dec 15, 2022

Modified: Apr 21, 2025

PUBLISHED

Description

A logic issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may bypass Same Origin Policy.

Vendor	Product	Versions
Apple	iCloud for Windows	affected `unspecified - < 14.1`
Apple	tvOS	affected `unspecified - < 16.2`
Apple	tvOS	affected `unspecified - < 13.1`
Apple	tvOS	affected `unspecified - < 16.2`
Apple	tvOS	affected `unspecified - < 15.7`
Apple	watchOS	affected `unspecified - < 9.2`
Apple	watchOS	affected `unspecified - < 16.2`

References

https://support.apple.com/en-us/HT213535

https://support.apple.com/en-us/HT213532

https://support.apple.com/en-us/HT213538

https://support.apple.com/en-us/HT213530

https://support.apple.com/en-us/HT213531

https://support.apple.com/en-us/HT213536

https://support.apple.com/en-us/HT213537

20221220 APPLE-SA-2022-12-13-1 iOS 16.2 and iPadOS 16.2

mailing-list

20221220 APPLE-SA-2022-12-13-2 iOS 15.7.2 and iPadOS 15.7.2

mailing-list

20221220 APPLE-SA-2022-12-13-4 macOS Ventura 13.1

mailing-list

20221220 APPLE-SA-2022-12-13-7 tvOS 16.2

mailing-list

20221220 APPLE-SA-2022-12-13-9 Safari 16.2

mailing-list

https://security.gentoo.org/glsa/202305-32

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.