First published: Mon Sep 12 2022(Updated: )
An issue existed with the file paths used to store website data. The issue was resolved by improving how website data is stored. This issue is fixed in iOS 16. An unauthorized user may be able to access browsing history.
Credit: Csaba Fitzl @theevilbit Offensive SecurityJeff Johnson Csaba Fitzl @theevilbit Offensive SecurityJeff Johnson Csaba Fitzl @theevilbit Offensive SecurityJeff Johnson product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Safari | <16 | 16 |
Apple iOS | <16 | 16 |
<13 | 13 | |
Apple Safari | <16.0 | |
Apple iPhone OS | <16.0 | |
Apple macOS | <13.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
The vulnerability ID for this issue is CVE-2022-32833.
The affected software products include Apple iOS 16, Apple Safari 16, and macOS Ventura 13.
The vulnerability involves an issue with the file paths used to store website data in WebKit.
The vulnerability was resolved by improving how website data is stored in WebKit.
You can find more information about this vulnerability on the Apple support website: [https://support.apple.com/en-us/HT213446](https://support.apple.com/en-us/HT213446), [https://support.apple.com/en-us/HT213442](https://support.apple.com/en-us/HT213442), [https://support.apple.com/en-us/HT213488](https://support.apple.com/en-us/HT213488).