Exploit / PoCcriticalExploited in the wild

Safari 15.6.1 fixes a zero

Security Affairsby @securityaffairsAug 18, 2022 · 22:37 UTC (Aug 18, 2022)1 min read3

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-32893 CVE-2022-22587 CVE-2022-22594 CVE-2022-22620 CVE-2022-22674 CVE-2022-22675

Tags: cve-2022-32893 cve-2022-22587 cve-2022-22594 cve-2022-22620 cve-2022-22674 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-22587	Memory Corruption in Apple iOS, iPadOS, and macOS Allows Kernel-Privilege Code Execution	9.8	12%	KEV	Mar 18, 2022 KEV Jan 28, 2022
CVE-2022-22594	A cross-origin issue in the IndexDB API was addressed with improved input validation	6.5	<1%		Mar 18, 2022
CVE-2022-22620	WebKit Use-After-Free (CVE-2022-22620) Enables RCE on iOS, iPadOS, and macOS	8.8	16%	KEV	Mar 18, 2022 KEV Feb 11, 2022
CVE-2022-22675 +1 related CVE CVE-2022-22674	Out-of-Bounds Write in Apple macOS/iOS Kernel Allows Arbitrary Code Execution	7.8 group max	12%	KEV	May 26, 2022 KEV Apr 4, 2022
CVE-2022-32893	Out-of-Bounds Write in Apple WebKit (iOS/macOS/Safari) Enables RCE	8.8	10%	KEV	Aug 24, 2022 KEV Aug 18, 2022

From the original article

1 min read at securityaffairs.com

Apple released Safari 15. 6. 1 for macOS Big Sur and Catalina to address a zero-day vulnerability actively exploited in the wild.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.