CVE-2022-32891

Katalog CVE

CVSS 6.1 · Medium EPSS 0,71%

Kerentanan Improper Restriction of Rendered UI Layers or Frames pada apple safari, apple iphone os +2 lainnya. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

The issue was addressed with improved UI handling. This issue is fixed in Safari 16, tvOS 16, watchOS 9, iOS 16. Visiting a website that frames malicious content may lead to UI spoofing.

Rincian

Terbit di NVD

27 Februari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1021: Improper Restriction of Rendered UI Layers or Frames

EPSS (30 hari)

0,71% peluang dieksploitasi; lebih tinggi dari 52,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.apple.com/en-us/HT213442 advisory vendor
• https://support.apple.com/en-us/HT213446 advisory vendor
• https://support.apple.com/en-us/HT213486 advisory vendor
• https://support.apple.com/en-us/HT213487 advisory vendor
• https://security.gentoo.org/glsa/202305-32