Lucene search
HistorySep 20, 2022 - 9:15 p.m.
CVE-2022-32795
address bar spoofing
ios 16
ipados 15.7
malicious website
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
0.001 Low
EPSS
Percentile
39.2%
This issue was addressed with improved checks. This issue is fixed in iOS 16, iOS 15.7 and iPadOS 15.7. Visiting a malicious website may lead to address bar spoofing.
Affected configurations
Node
appleipadosRange<15.7
ORappleiphone_osRange<15.7
Related
cve
cve
CVE-2022-32795
2022-09-20 21:15:10
cvelist
cvelist
CVE-2022-32795
2022-09-20 00:00:00
prion
prion
Design/Logic Flaw
2022-09-20 21:15:00
apple
apple
About the security content of iOS 15.7 and iPadOS 15.7
2022-09-12 00:00:00
About the security content of iOS 16
2022-09-12 00:00:00
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
0.001 Low
EPSS
Percentile
39.2%
Related for NVD:CVE-2022-32795