First published: Wed Jul 20 2022(Updated: )
JavaScriptCore. The issue was addressed with improved bounds checks.
Credit: product-security@apple.com product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple watchOS | <8.7 | 8.7 |
Apple Safari | <15.6 | 15.6 |
Apple tvOS | <15.6 | 15.6 |
<12.5 | 12.5 | |
Apple iOS | <15.6 | 15.6 |
Apple iPadOS | <15.6 | 15.6 |
Apple Safari | <15.6 | |
Apple iPadOS | <15.6 | |
Apple iPhone OS | <15.6 | |
Apple macOS | >=12.0.0<12.5 | |
Apple tvOS | <15.6 | |
Apple watchOS | <8.7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
The vulnerability ID for this issue is CVE-2022-48503.
The severity of CVE-2022-48503 is high with a CVSS score of 8.8.
CVE-2022-48503 affects macOS Monterey 12.5, Safari 15.6, iPadOS 15.6, iOS 15.6, tvOS 15.6, and watchOS 8.7.
CVE-2022-48503 was addressed with improved bounds checks in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, and Safari 15.6.
CVE-2022-48503 may allow arbitrary code execution when processing web content.