Vulnerability Details : CVE-2022-32886
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution.
Vulnerability category: OverflowMemory Corruption
Products affected by CVE-2022-32886
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2022-32886
0.53%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 77 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2022-32886
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
8.8
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
NIST |
CWE ids for CVE-2022-32886
-
The product writes data past the end, or before the beginning, of the intended buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2022-32886
-
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KDV6OLKDTL55NH4LNSMLQ4D6LLSX6JU2/
[SECURITY] Fedora 37 Update: webkitgtk-2.38.0-2.fc37 - package-announce - Fedora Mailing-Lists
-
https://security.gentoo.org/glsa/202305-32
WebKitGTK+: Multiple Vulnerabilities (GLSA 202305-32) — Gentoo security
-
https://www.debian.org/security/2022/dsa-5240
Debian -- Security Information -- DSA-5240-1 webkit2gtkMailing List;Third Party Advisory
-
http://seclists.org/fulldisclosure/2022/Oct/41
Full Disclosure: APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13Mailing List;Third Party Advisory
-
https://support.apple.com/en-us/HT213445
About the security content of iOS 15.7 and iPadOS 15.7 - Apple SupportRelease Notes;Vendor Advisory
-
https://www.debian.org/security/2022/dsa-5241
Debian -- Security Information -- DSA-5241-1 wpewebkitMailing List;Third Party Advisory
-
https://lists.debian.org/debian-lts-announce/2022/09/msg00034.html
[SECURITY] [DLA 3124-1] webkit2gtk security updateMailing List;Third Party Advisory
-
http://seclists.org/fulldisclosure/2022/Oct/28
Full Disclosure: APPLE-SA-2022-10-24-2 macOS Ventura 13
-
http://seclists.org/fulldisclosure/2022/Oct/39
Full Disclosure: APPLE-SA-2022-10-27-3 Additional information for APPLE-SA-2022-09-12-1 iOS 16
-
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TDNT32WIARRD2ANWKGCTTIQXI6OII7HZ/
[SECURITY] Fedora 35 Update: webkit2gtk3-2.38.0-2.fc35 - package-announce - Fedora Mailing-Lists
-
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/74MXH2U5GA4CX3L3NLYP4TBO4O2VOPBJ/
[SECURITY] Fedora 36 Update: webkit2gtk3-2.38.0-2.fc36 - package-announce - Fedora Mailing-Lists
-
https://support.apple.com/en-us/HT213446
About the security content of iOS 16 - Apple SupportRelease Notes;Vendor Advisory
-
https://support.apple.com/en-us/HT213442
About the security content of Safari 16 - Apple SupportRelease Notes;Vendor Advisory
Jump to