CVE-2022-22589
Summary
| CVE | CVE-2022-22589 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-03-18 18:15:00 UTC |
| Updated | 2023-08-08 14:22:00 UTC |
| Description | A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing a maliciously crafted mail message may lead to running arbitrary javascript. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Apple | Ipados | All | All | All | All |
| Operating System | Apple | Iphone Os | All | All | All | All |
| Operating System | Apple | Macos | All | All | All | All |
| Operating System | Apple | Mac Os X | All | All | All | All |
| Operating System | Apple | Mac Os X | 10.15.7 | - | All | All |
| Operating System | Apple | Mac Os X | 10.15.7 | security_update_2020 | All | All |
| Operating System | Apple | Mac Os X | 10.15.7 | security_update_2020-001 | All | All |
| Operating System | Apple | Mac Os X | 10.15.7 | security_update_2020-005 | All | All |
| Operating System | Apple | Mac Os X | 10.15.7 | security_update_2020-007 | All | All |
| Operating System | Apple | Mac Os X | 10.15.7 | security_update_2021-001 | All | All |
| Operating System | Apple | Mac Os X | 10.15.7 | security_update_2021-002 | All | All |
| Operating System | Apple | Mac Os X | 10.15.7 | security_update_2021-003 | All | All |
| Operating System | Apple | Mac Os X | 10.15.7 | security_update_2021-006 | All | All |
| Operating System | Apple | Mac Os X | 10.15.7 | security_update_2021-007 | All | All |
| Operating System | Apple | Mac Os X | 10.15.7 | security_update_2021-008 | All | All |
| Operating System | Apple | Mac Os X | 10.15.7 | security_update_2022-001 | All | All |
| Operating System | Apple | Mac Os X | 10.15.7 | security_update_2022-002 | All | All |
| Operating System | Apple | Mac Os X | 10.15.7 | supplemental_update | All | All |
| Application | Apple | Safari | All | All | All | All |
| Operating System | Apple | Tvos | All | All | All | All |
| Operating System | Apple | Watchos | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| About the security content of macOS Big Sur 11.6.6 - Apple Support | CONFIRM | support.apple.com | |
| About the security content of Security Update 2022-004 Catalina - Apple Support | CONFIRM | support.apple.com | |
| WebKitGTK+: Multiple Vulnerabilities (GLSA 202208-39) — Gentoo security | GENTOO | security.gentoo.org | |
| About the security content of macOS Monterey 12.2 - Apple Support | MISC | support.apple.com | |
| About the security content of iOS 15.3 and iPadOS 15.3 - Apple Support | MISC | support.apple.com | |
| Full Disclosure: APPLE-SA-2022-05-16-3 macOS Big Sur 11.6.6 | FULLDISC | seclists.org | |
| About the security content of watchOS 8.4 - Apple Support | MISC | support.apple.com | |
| About the security content of tvOS 15.3 - Apple Support | MISC | support.apple.com | |
| About the security content of Security Update 2022-003 Catalina - Apple Support | CONFIRM | support.apple.com | |
| Full Disclosure: APPLE-SA-2022-05-16-4 Security Update 2022-004 Catalina | FULLDISC | seclists.org | |
| About the security content of Safari 15.3 - Apple Support | MISC | support.apple.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159799 Oracle Enterprise Linux Security Update for webkit2gtk3 (ELSA-2022-1777)
- 179088 Debian Security Update for wpewebkit (DSA 5084-1)
- 179089 Debian Security Update for webkit2gtk (DSA 5083-1)
- 183886 Debian Security Update for webkit2gtkwpewebkit (CVE-2022-22589)
- 198681 Ubuntu Security Notification for WebKitGTK Vulnerabilities (USN-5306-1)
- 240305 Red Hat Update for webkit2gtk3 security (RHSA-2022:1777)
- 282364 Fedora Security Update for webkit2gtk3 (FEDORA-2022-cbd155f714)
- 282458 Fedora Security Update for webkit2gtk3 (FEDORA-2022-5dd9b908d6)
- 296063 Oracle Solaris 11.4 Support Repository Update (SRU) 45.119.2 Missing (CPUAPR2022)
- 376307 Apple Safari multiple Vulnerabilities (HT213058)
- 376365 Apple Safari Multiple Vulnerabilities (HT213058)
- 376368 Apple MacOS Monterey 12.2 Not Installed (HT213054)
- 376607 Apple macOS Security Update 2022-004 Catalina (HT213255)
- 376608 Apple MacOS Big Sur 11.6.6 Not Installed (HT213256)
- 502398 Alpine Linux Security Update for webkit2gtk
- 505527 Alpine Linux Security Update for webkit2gtk
- 610395 Apple iOS 15.3 and iPadOS 15.3 Security Update Missing
- 710613 Gentoo Linux WebKitGTK+ Multiple Vulnerabilities (GLSA 202208-39)
- 751784 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2022:0703-1)
- 751790 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2022:0690-1)
- 751794 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2022:0705-1)
- 751823 OpenSUSE Security Update for webkit2gtk3 (openSUSE-SU-2022:0705-1)
- 940505 AlmaLinux Security Update for webkit2gtk3 (ALSA-2022:1777)