CVE-2022-22637

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 and iPadOS 15.4, tvOS 15.4. A malicious website may cause unexpected cross-origin behavior.

Score

CVSS 3.1 8.8 High

Status

Modified - product-security@apple.com

Published

2022-09-23

Last modified

2025-05-22

Weaknesses

CWE-346

Affected products

• Ipad Os (Apple)
• Iphone Os (Apple)
• Macos (Apple)
• Safari (Apple)
• Tvos (Apple)
• Watchos (Apple)

References

• https://support.apple.com/en-us/HT213182
• https://support.apple.com/en-us/HT213183
• https://support.apple.com/en-us/HT213186
• https://support.apple.com/en-us/HT213187
• https://support.apple.com/en-us/HT213193