Veille CVE
CVE-2022-48503
8.8 Élevée Exploitée activementCatalogue CISA KEV — Apple Multiple Products Unspecified Vulnerability
Ajoutée le 20/10/2025 · Échéance de correction (agences US) : 10/11/2025
Action requise : Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Description
The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 8.8 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 3.1 | 8.8 Élevée | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Faiblesses (CWE)
Références
- https://support.apple.com/en-us/HT213340 Release NotesVendor Advisory
- https://support.apple.com/en-us/HT213341 Release NotesVendor Advisory
- https://support.apple.com/en-us/HT213342 Release NotesVendor Advisory
- https://support.apple.com/en-us/HT213345 Release NotesVendor Advisory
- https://support.apple.com/en-us/HT213346 Release NotesVendor Advisory
- https://support.apple.com/en-us/HT213340 Release NotesVendor Advisory
- https://support.apple.com/en-us/HT213341 Release NotesVendor Advisory
- https://support.apple.com/en-us/HT213342 Release NotesVendor Advisory
- https://support.apple.com/en-us/HT213345 Release NotesVendor Advisory
- https://support.apple.com/en-us/HT213346 Release NotesVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-48503 US Government Resource