CVE-2022-46692: apple icloud +6 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2022-46692

CVSS 5.5 · Medium EPSS 0,21%

Kerentanan Insufficient Verification of Data Authenticity pada apple icloud, apple safari +5 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A logic issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may bypass Same Origin Policy.

Rincian

Terbit di NVD: 15 Desember 2022
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-345: Insufficient Verification of Data Authenticity
EPSS (30 hari): 0,21% peluang dieksploitasi; lebih tinggi dari 10,1% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
apple	icloud	Semua versi sebelum 14.1
apple	safari	Semua versi sebelum 16.2
apple	ipados	Semua versi sebelum 15.7.2
apple	ipados	Versi 16.0 hingga sebelum 16.2
apple	iphone os	Semua versi sebelum 15.7.2
apple	iphone os	Versi 16.0 hingga sebelum 16.2
apple	macos	Semua versi sebelum 13.1
apple	tvos	Semua versi sebelum 16.2
apple	watchos	Semua versi sebelum 9.2

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://support.apple.com/en-us/HT213530 advisory vendor
https://support.apple.com/en-us/HT213531 release notes · advisory vendor
https://support.apple.com/en-us/HT213532 release notes · advisory vendor
https://support.apple.com/en-us/HT213535 release notes · advisory vendor
https://support.apple.com/en-us/HT213536 advisory vendor
https://support.apple.com/en-us/HT213537 release notes · advisory vendor
https://support.apple.com/en-us/HT213538 advisory vendor
http://seclists.org/fulldisclosure/2022/Dec/20 mailing list · advisory pihak ketiga
http://seclists.org/fulldisclosure/2022/Dec/21 mailing list · advisory pihak ketiga
http://seclists.org/fulldisclosure/2022/Dec/23 mailing list · advisory pihak ketiga
http://seclists.org/fulldisclosure/2022/Dec/26 mailing list · advisory pihak ketiga
http://seclists.org/fulldisclosure/2022/Dec/28 mailing list · advisory pihak ketiga
https://security.gentoo.org/glsa/202305-32

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.