Ubuntu.comUB:CVE-2022-42799CVE-2022-42799
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
49.2%
The issue was addressed with improved UI handling. This issue is fixed in
tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS
16. Visiting a malicious website may lead to user interface spoofing.
Notes
| Author | Note |
|---|---|
| jdstrand | webkit receives limited support. For details, see https://wiki.ubuntu.com/SecurityTeam/FAQ#webkit webkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8 |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | qtwebkit-opensource-src | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | qtwebkit-opensource-src | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | qtwebkit-opensource-src | < any | UNKNOWN |
| ubuntu | 23.10 | noarch | qtwebkit-opensource-src | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | qtwebkit-opensource-src | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | qtwebkit-opensource-src | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | webkit2gtk | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | webkit2gtk | < 2.38.2-0ubuntu0.20.04.1 | UNKNOWN |
| ubuntu | 22.04 | noarch | webkit2gtk | < 2.38.2-0ubuntu0.22.04.2 | UNKNOWN |
| ubuntu | 22.10 | noarch | webkit2gtk | < 2.38.2-0ubuntu0.22.10.1 | UNKNOWN |
References
launchpad.net/bugs/cve/CVE-2022-42799
nvd.nist.gov/vuln/detail/CVE-2022-42799
security-tracker.debian.org/tracker/CVE-2022-42799
support.apple.com/en-us/HT213488
support.apple.com/en-us/HT213489
support.apple.com/en-us/HT213491
support.apple.com/en-us/HT213492
support.apple.com/en-us/HT213495
ubuntu.com/security/notices/USN-5730-1
webkitgtk.org/security/WSA-2022-0010.html
www.cve.org/CVERecord?id=CVE-2022-42799
Related
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
49.2%