Vulnerabilities > CVE-2022-32891 - Improper Restriction of Rendered UI Layers or Frames vulnerability in Apple products

047910
CVSS 6.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
apple
CWE-1021

Summary

The issue was addressed with improved UI handling. This issue is fixed in Safari 16, tvOS 16, watchOS 9, iOS 16. Visiting a website that frames malicious content may lead to UI spoofing.

Vulnerable Configurations

Part Description Count
OS
Apple
409
Application
Apple
188