CVE-2022-32868

2022-09-2000:00:00

apple

www.cve.org

logic issue

state management

safari web extensions

cve-2022-32868

5.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.8%

JSON

A logic issue was addressed with improved state management. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. A website may be able to track users through Safari web extensions.

CNA Affected

[
  {
    "vendor": "Apple",
    "product": "iOS",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "16",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "Safari",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "16",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "iOS and iPadOS",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "15.7",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]