CVE-2022-22594

—

CVSS 3.1

6.5 medium

EPSS

<1%p57

Published

Mar 18, 2022 (Mar 18, 2022)

Modified

Jun 17, 2026

Description

A cross-origin issue in the IndexDB API was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. A website may be able to track sensitive user information.

Vendors: apple
Products: safari, ipados, iphone os, macos, tvos, watchos
Weakness: CWE-346
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news19 stories

Apple releases emergency patch for two iPhone, Mac zero

The RecordJan 11, 00:00 UTC · Jan 11, 2023Vulnerability CVE-2022-32894 CVE-2022-32893 CVE-2022-22587+4 CVEs

60

New Actively Exploited Zero-Day Vulnerability Discovered in Apple Products

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2022Exploit / PoC in the wildCVE-2022-42856 CVE-2022-22587 CVE-2022-22594+7 CVEs

60

Apple fixed the tenth actively exploited zero

Security AffairsDec 14, 11:12 UTC · Dec 14, 2022Exploit / PoC in the wildCVE-2022-42856 CVE-2022-22587 CVE-2022-22594+6 CVEs

60

Apple backports fixes for CVE-2022-42827 zero

Security AffairsOct 28, 09:25 UTC · Oct 28, 2022Vulnerability in the wildCVE-2022-42827 CVE-2022-22587 CVE-2022-22594+5 CVEs

60

Apple Releases Patch for New Actively Exploited iOS and iPadOS Zero

The Hacker NewsOct 28, 07:13 UTC · Oct 28, 2022Vulnerability in the wildCVE-2022-42827 CVE-2022-32894 CVE-2022-32917+6 CVEs

60

Apple fixed the ninth actively exploited zero

Security AffairsOct 24, 21:09 UTC · Oct 24, 2022Exploit / PoC in the wildCVE-2022-42827 CVE-2022-22587 CVE-2022-22594+5 CVEs

60

Apple Releases iOS and macOS Updates to Patch Actively Exploited Zero

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2022Vulnerability in the wildCVE-2022-32917 CVE-2022-22587 CVE-2022-22594+5 CVEs

60

Apple fixed the eighth actively exploited zero

Security AffairsSep 14, 19:54 UTC · Sep 14, 2022Exploit / PoC in the wildCVE-2022-32917 CVE-2022-32894 CVE-2022-22587+4 CVEs

60

Apple released patches for recently disclosed WebKit zero

Security AffairsSep 1, 08:06 UTC · Sep 1, 2022Vulnerability in the wildCVE-2022-32893 CVE-2022-22587 CVE-2022-22594+3 CVEs

60

Apple fixed two new zero

Security AffairsAug 31, 22:14 UTC · Aug 31, 2022Exploit / PoC in the wildCVE-2022-32893 CVE-2022-32894 CVE-2022-22587+4 CVEs

60

Safari 15.6.1 fixes a zero

Security AffairsAug 18, 22:37 UTC · Aug 18, 2022Exploit / PoC in the wildCVE-2022-32893 CVE-2022-22587 CVE-2022-22594+3 CVEs

60

Apple fixes the sixth zero

Security AffairsMay 16, 20:27 UTC · May 16, 2022Exploit / PoC in the wildCVE-2022-22675 CVE-2022-22587 CVE-2022-22594+2 CVEs

60

Apple releases fixes for two zero

The RecordApr 21, 00:00 UTC · Apr 21, 2022Exploit / PoC in the wildCVE-2022-22675 CVE-2022-22674 CVE-2022-22587+2 CVEs

60

Apple Issues Patches for 2 Actively Exploited Zero

The Hacker NewsApr 1, 02:54 UTC · Apr 1, 2022Vulnerability in the wildCVE-2022-22675 CVE-2022-22674 CVE-2022-22594+2 CVEs

60

Apple issues emergency patches to fix actively exploited zero

Security AffairsMar 31, 20:05 UTC · Mar 31, 2022Vulnerability in the wildCVE-2022-22674 CVE-2022-22675 CVE-2022-22620+2 CVEs

60

Apple addressed a third zero

Security AffairsFeb 11, 13:16 UTC · Feb 11, 2022Exploit / PoC in the wildCVE-2022-22620 CVE-2022-22587 CVE-2022-22594

60

Apple Releases iOS, iPadOS, macOS Updates to Patch Actively Exploited Zero

The Hacker NewsFeb 11, 03:30 UTC · Feb 11, 2022Vulnerability in the wildCVE-2022-22620 CVE-2022-22587 CVE-2022-22594

60

Apple Releases iOS and macOS Updates to Patch Actively Exploited 0

The Hacker NewsJan 27, 06:32 UTC · Jan 27, 2022Vulnerability in the wildCVE-2022-22587 CVE-2021-30807 CVE-2021-30883+7 CVEs

60

Apple fixed the first two zero

Security AffairsJan 26, 22:26 UTC · Jan 26, 2022Exploit / PoC in the wildCVE-2022-22587 CVE-2022-22594

60