Ubuntu.comUB:CVE-2022-32919CVE-2022-32919
4.7 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
4.7 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.1%
The issue was addressed with improved UI handling. This issue is fixed in
iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Visiting a website that
frames malicious content may lead to UI spoofing.
Notes
| Author | Note |
|---|---|
| jdstrand | webkit receives limited support. For details, see https://wiki.ubuntu.com/SecurityTeam/FAQ#webkit webkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8 |
| mdeslaur | It is no longer possible to build new webkit2gtk versions on focal and earlier. Marking as ignored. |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 20.04 | noarch | webkit2gtk | < 2.38.4-0ubuntu0.20.04.2 | UNKNOWN |
| ubuntu | 22.04 | noarch | webkit2gtk | < 2.38.4-0ubuntu0.22.04.1 | UNKNOWN |
| ubuntu | 23.04 | noarch | webkit2gtk | < 2.38.4-2 | UNKNOWN |
| ubuntu | 23.10 | noarch | webkit2gtk | < 2.38.4-2 | UNKNOWN |
| ubuntu | 24.04 | noarch | webkit2gtk | < 2.38.4-2 | UNKNOWN |
Related
4.7 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
4.7 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.1%