跳转到帖子

Red Hat: CVE-2022-42856: processing maliciously crafted web content may lead to an arbitrary code execution (Multiple Advisories)

recommended_posts

发布于
  • Members

Red Hat: CVE-2022-42856: processing maliciously crafted web content may lead to an arbitrary code execution (Multiple Advisories)

Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
12/15/2022
Created
01/06/2023
Added
01/05/2023
Modified
01/28/2025

Description

A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.1.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.1..

Solution(s)

  • redhat-upgrade-webkit2gtk3
  • redhat-upgrade-webkit2gtk3-debuginfo
  • redhat-upgrade-webkit2gtk3-debugsource
  • redhat-upgrade-webkit2gtk3-devel
  • redhat-upgrade-webkit2gtk3-devel-debuginfo
  • redhat-upgrade-webkit2gtk3-jsc
  • redhat-upgrade-webkit2gtk3-jsc-debuginfo
  • redhat-upgrade-webkit2gtk3-jsc-devel
  • redhat-upgrade-webkit2gtk3-jsc-devel-debuginfo

References

  • CVE-2022-42856
  • RHSA-2023:0016
  • RHSA-2023:0021
  • 查看数 715
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…