CVE-2022-22592 Information

Description

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3 watchOS 8.4 tvOS 15.3 Safari 15.3 macOS Monterey 12.2. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Reference

https://support.apple.com/en-us/HT213058 https://support.apple.com/en-us/HT213059 https://support.apple.com/en-us/HT213057 https://support.apple.com/en-us/HT213054 https://support.apple.com/en-us/HT213053

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

REQUIRED

Confidentiality Impact

UNCHANGED

Integrity Impact

NONE

Availability Impact

HIGH

Base Score

NONE

Base Severity

6.5