Vendor / Project: Apple Product: iOS, iPadOS, and macOS Description: Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. Required Action: Apply updates per vendor instructions. Due Date: 2022-02-25 Ransomware Campaign Use: Unknown CWEs: CWE-416 Notes: https://nvd.nist.gov/vuln/detail/CVE-2022-22620
CVE-2022-22620 — Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2022-02-11 00:00 UTC
- Importiert: 2026-10-20 22:46 UTC
- CVSS: 8.8
- Quelle-ID:
cisa_kev - uid_hash:
c62b894a39064758e00b1f8364eeb75968f2ceed4b5cbb6444b7fe1093a1bf9a
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
8.8 |
HIGH |
8.8 |
2022-03-18 |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CISA – Known Exploited Vulnerabilities (KEV) | threat_intel | cisa, kev | - | de | https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json |