Vulnerabilities > CVE-2022-32863 - Out-of-bounds Write vulnerability in Apple Safari

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

apple

CWE-787

critical

NVD

Published: 2022-09-20

Updated: 2023-03-17

Summary

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 15.6, macOS Monterey 12.5. Processing maliciously crafted web content may lead to arbitrary code execution.

Vulnerable Configurations

Part	Description	Count
Application	Apple Apple Safari - Apple Safari 1.0 Apple Safari 1.0.0 Apple Safari 1.0.0B1 Apple Safari 1.0.0B2 Apple Safari 1.0.1 Apple Safari 1.0.2 Apple Safari 1.0.3 Apple Safari 1.0B1 Apple Safari 1.1 Apple Safari 1.1.0 Apple Safari 1.1.1 Apple Safari 1.2 Apple Safari 1.2.0 Apple Safari 1.2.1 Apple Safari 1.2.2 Apple Safari 1.2.3 Apple Safari 1.2.4 Apple Safari 1.2.5 Apple Safari 1.3 Apple Safari 1.3.0 Apple Safari 1.3.1 Apple Safari 1.3.2 Apple Safari 2 Apple Safari 2.0 Apple Safari 2.0.0 Apple Safari 2.0.1 Apple Safari 2.0.2 Apple Safari 2.0.3 Apple Safari 2.0.4 Apple Safari 3 Apple Safari 3.0 Apple Safari 3.0.0 Apple Safari 3.0.0B Apple Safari 3.0.1 Apple Safari 3.0.1B Apple Safari 3.0.2 Apple Safari 3.0.2B Apple Safari 3.0.3 Apple Safari 3.0.3B Apple Safari 3.0.4 Apple Safari 3.0.4B Apple Safari 3.0.5 Apple Safari 3.1.0 Apple Safari 3.1.0B Apple Safari 3.1.1 Apple Safari 3.1.1B Apple Safari 3.1.2 Apple Safari 3.1.2B Apple Safari 3.2.0 Apple Safari 3.2.0B Apple Safari 3.2.1 Apple Safari 3.2.1B Apple Safari 3.2.2 Apple Safari 3.2.2B Apple Safari 4.0 Apple Safari 4.0.0B Apple Safari 4.0.1 Apple Safari 4.0.2 Apple Safari 4.0.3 Apple Safari 4.0.4 Apple Safari 4.0.5 Apple Safari 4.1 Apple Safari 4.1.1 Apple Safari 4.1.2 Apple Safari 4.1.3 Apple Safari 5.0 Apple Safari 5.0.1 Apple Safari 5.0.2 Apple Safari 5.0.3 Apple Safari 5.0.4 Apple Safari 5.0.5 Apple Safari 5.0.6 Apple Safari 5.1 Apple Safari 5.1.1 Apple Safari 5.1.2 Apple Safari 5.1.3 Apple Safari 5.1.4 Apple Safari 5.1.5 Apple Safari 5.1.6 Apple Safari 5.1.7 Apple Safari 6.0 Apple Safari 6.0.1 Apple Safari 6.0.2 Apple Safari 6.0.3 Apple Safari 6.0.4 Apple Safari 6.0.5 Apple Safari 6.1 Apple Safari 6.1.1 Apple Safari 6.1.2 Apple Safari 6.1.3 Apple Safari 6.1.4 Apple Safari 6.1.5 Apple Safari 6.2.1 Apple Safari 6.2.4 Apple Safari 6.2.5 Apple Safari 6.2.6 Apple Safari 6.2.8 Apple Safari 7.0 Apple Safari 7.0.1 Apple Safari 7.0.2 Apple Safari 7.0.3 Apple Safari 7.0.4 Apple Safari 7.0.5 Apple Safari 7.1 Apple Safari 7.1.1 Apple Safari 7.1.4 Apple Safari 7.1.5 Apple Safari 7.1.6 Apple Safari 7.1.8 Apple Safari 8.0 Apple Safari 8.0.1 Apple Safari 8.0.4 Apple Safari 8.0.5 Apple Safari 8.0.6 Apple Safari 8.0.8 Apple Safari 9.0.1 Apple Safari 9.0.2 Apple Safari 9.0.3 Apple Safari 9.1 Apple Safari 9.1.1 Apple Safari 9.1.3 Apple Safari 10.0.0 Apple Safari 10.0.1 Apple Safari 10.0.2 Apple Safari 10.0.3 Apple Safari 10.1 Apple Safari 10.1.1 Apple Safari 10.1.2 Apple Safari 11.0 Apple Safari 11.0.1 Apple Safari 11.0.2 Apple Safari 11.0.3 Apple Safari 11.1 Apple Safari 11.1.1 Apple Safari 11.1.2 Apple Safari 12 Apple Safari 12.0 Apple Safari 12.0.1 Apple Safari 12.0.2 Apple Safari 12.0.3 Apple Safari 12.1 Apple Safari 12.1.1 Apple Safari 12.1.2 Apple Safari 13 Apple Safari 13.0.1 Apple Safari 13.0.3 Apple Safari 13.0.4 Apple Safari 13.0.5 Apple Safari 13.1 Apple Safari 13.1.1 Apple Safari 13.1.2 Apple Safari 14.0 Apple Safari 14.0.1 Apple Safari 14.0.2 Apple Safari 14.0.3 Apple Safari 14.1 Apple Safari 14.1.1 Apple Safari 14.1.2 Apple Safari 15.0.0 Apple Safari 15.4	186
OS	Apple Apple Macos 12.0.0 Apple Macos 12.0.1 Apple Macos 12.1 Apple Macos 12.2 Apple Macos 12.2.1 Apple Macos 12.3 Apple Macos 12.4	7

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References