CVE-2022-22662

CVE Database · CVE-2022-22662

CVE-2022-22662

· MEDIUMModified

CVSS v3.1

6.5

EPSS

1.26%

Published

May 26, 2022

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5. Processing maliciously crafted web content may disclose sensitive user information.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected Products (18)

apple · mac_os_x (up to 10.15.7)vulnerable

apple · mac_os_xvulnerable

References (12)

http://www.openwall.com/lists/oss-security/2022/07/05/3

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33BWWAQLLBHKGSI332ZZCORTFZ2XLOIH/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ANNHXXARVBRGI74TVQNZOAG6P7AGSMUJ/

https://security.gentoo.org/glsa/202208-39

Third Party Advisory

https://support.apple.com/en-us/HT213184

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213185

Release NotesVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs