Unscored CVE-2022-32868 EUVD-2022-35934GHSA-2xc7-wvf3-85p6

A logic issue was addressed with improved state management. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. A website m…

Published Sep 20, 2022 · Updated Aug 3, 2024 · Assigned by apple

Vendor: Apple Product: iOS Product: iOS and iPadOS Product: Safari Platform: iOS Category: Browsers

Description

A logic issue was addressed with improved state management. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. A website may be able to track users through Safari web extensions.

Affected products

Vendor	Product	Affected	Fixed
Apple	iOS	unspecified – < 16	16
Apple	Safari	unspecified – < 16	16
Apple	iOS and iPadOS	unspecified – < 15.7	15.7

Advisories 1

WID-SEC-2022-1394 Apple iOS und Apple iPadOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 13, 2023

References

https://support.apple.com/en-us/HT213446
https://support.apple.com/en-us/HT213445
https://support.apple.com/en-us/HT213442
20221030 APPLE-SA-2022-10-27-3 Additional information for APPLE-SA-2022-09-12-1 iOS 16 mailing-list
20221030 APPLE-SA-2022-10-27-4 Additional information for APPLE-SA-2022-09-12-2 iOS 15.7 and iPadOS 15.7 mailing-list
20221030 APPLE-SA-2022-10-27-14 Additional information for APPLE-SA-2022-09-12-5 Safari 16 mailing-list