CVE-2022-42856

A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.1.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.1..

Attack Vector (AV)	Network	Adjacent	Local	Physical
Attack Complexity (AC)	LOW	High
Privileges Required (PR)	None	Low	High
User Interaction (UI)	None	Required
Scope (S)	Unchange	Change
Confidentiality (C)	None	Low	High
Integrity (I)	None	Low	High
Availability (A)	None	Low	High

NVD References

Description from Forti

About the security content of macOS Ventura 13 1

Affected Products

Impact

Recommended Actions

References

Refer to Information on External Sites

CVE Infomation	Exploits or more Infomation
mitre	EXPLOIT DATABASE
NVD	0day.today
vulmon.com	github
CVE Details	Twitter
JVN ENG JPN
Reconshell

List of frequently cited URLs

URL	Num of Times Referred to
https://alerts.vulmon.com/?utm_source=twitter&utm_medium=so...	242
https://cvetrends.com	50
https://securityaffairs.com/141221/security/apple-backporte...	12
https://www.helpnetsecurity.com/2023/01/24/cve-2022-42856-i...	9
https://applech2.com/archives/20230124-ios-12-5-7-for-cve-2...	7
https://www.bleepingcomputer.com/news/apple/apple-fixes-act...	5
https://support.apple.com/en-us/HT213597	4
https://securityonline.info/apple-warns-of-0-day-cve-2022-4...	4
https://ift.tt/X4AJLSz	3
https://twitter.com/BleepinComputer/status/1617607233117855746	3
https://tweetedtimes.com/thinksnews?s=tnp	3
https://www.cibertip.com/vulnerabilidades/cve-2022-42856-ap...	3
https://voidistaff.github.io/safari/2023/02/20/CVE-2022-428...	3

User	URL	Info Source	Date
VoidiStaff	https://voidistaff.github.io/safari/2023/02/20/CVE-2022-428...	Source VoidiStaff 1631304177547882496	2023/03/02
ipssignatures	https://twitter.com/VoidiStaff/status/1631304177547882496	Source ipssignatures 1631355186739306496	2023/03/03
ipssignatures	https://twitter.com/VoidiStaff/status/1631304177547882496	Source ipssignatures 1631627495102468097	2023/03/03
CVEtrends	https://cvetrends.com	Source CVEtrends 1631655684193304578	2023/03/03
ipssignatures	https://twitter.com/VoidiStaff/status/1631304177547882496	Source ipssignatures 1631869075751043076	2023/03/04
__kokumoto	https://www.bleepingcomputer.com/news/apple/apple-fixes-rec...	Source __kokumoto 1640484808701902848	2023/03/28
blackorbird	https://blog.google/threat-analysis-group/spyware-vendors-u...	Source blackorbird 1641814397185331200	2023/03/31
blackorbird	https://twitter.com/blackorbird/status/1641814397185331200/...	Source blackorbird 1641814397185331200	2023/03/31
reverseame	https://voidistaff.github.io/safari/2023/02/20/CVE-2022-428...	Source reverseame 1645309022906490883	2023/04/10
ov3rflow1	https://voidistaff.github.io/safari/2023/02/20/CVE-2022-428...	Source ov3rflow1 1645309800920514560	2023/04/10
ipssignatures	https://twitter.com/reverseame/status/1645309022906490883	Source ipssignatures 1645397719345668099	2023/04/10

User	URL	Info Source
VoidiStaff	voidistaff.github.io	Show Tweet
ipssignatures	twitter.com	Show Tweet
ipssignatures	twitter.com	Show Tweet
CVEtrends	cvetrends.com	Show Tweet
ipssignatures	twitter.com	Show Tweet
__kokumoto	bleepingcomputer.com	Show Tweet
blackorbird	blog.google	Show Tweet
blackorbird	twitter.com	Show Tweet
reverseame	voidistaff.github.io	Show Tweet
ov3rflow1	voidistaff.github.io	Show Tweet
ipssignatures	twitter.com	Show Tweet