Lucene search

K
cvelistAppleCVELIST:CVE-2022-32891
HistoryFeb 27, 2023 - 12:00 a.m.

CVE-2022-32891

2023-02-2700:00:00
apple
www.cve.org
1
ui handling
safari 16
tvos 16
watchos 9
ios 16
website security
ui spoofing

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.1%

The issue was addressed with improved UI handling. This issue is fixed in Safari 16, tvOS 16, watchOS 9, iOS 16. Visiting a website that frames malicious content may lead to UI spoofing.

CNA Affected

[
  {
    "vendor": "Apple",
    "product": "iOS",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "16",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "Safari",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "16",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "watchOS",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "9",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "watchOS",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "16",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.1%