← back
CVE-2022-32868

CVE-2022-32868

EPSS 0.8%
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
20 Sep 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A logic issue was addressed with improved state management. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. A website may be able to track users through Safari web extensions.
Affected products
Apple · iOSApple · iOS and iPadOSApple · Safari
References
http://seclists.org/fulldisclosure/2022/Oct/39http://seclists.org/fulldisclosure/2022/Oct/40http://seclists.org/fulldisclosure/2022/Oct/50https://support.apple.com/en-us/HT213442https://support.apple.com/en-us/HT213445https://support.apple.com/en-us/HT213446