← Volver a CVEs

CVE-2022-42837

CRITICAL

9.8

Descripcion

An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, watchOS 9.2. A remote user may be able to cause unexpected app termination or arbitrary code execution.

Detalles CVE

Puntuacion CVSS v3.19.8

SeveridadCRITICAL

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioNONE

Publicado12/15/2022

Ultima modificacion4/21/2025

Fuentenvd

Avistamientos honeypot0

Productos afectados

apple:ipadosapple:iphone_osapple:macosapple:watchos

Debilidades (CWE)

CWE-20

Referencias

http://seclists.org/fulldisclosure/2022/Dec/20(product-security@apple.com)

http://seclists.org/fulldisclosure/2022/Dec/21(product-security@apple.com)

http://seclists.org/fulldisclosure/2022/Dec/23(product-security@apple.com)

http://seclists.org/fulldisclosure/2022/Dec/27(product-security@apple.com)

https://support.apple.com/en-us/HT213530(product-security@apple.com)

https://support.apple.com/en-us/HT213531(product-security@apple.com)

https://support.apple.com/en-us/HT213532(product-security@apple.com)

https://support.apple.com/en-us/HT213536(product-security@apple.com)

https://support.apple.com/kb/HT213535(product-security@apple.com)

http://seclists.org/fulldisclosure/2022/Dec/20(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2022/Dec/21(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2022/Dec/23(af854a3a-2127-422b-91ae-364da2661108)

http://seclists.org/fulldisclosure/2022/Dec/27(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT213530(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT213531(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT213532(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT213536(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/kb/HT213535(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.