Skip to content
OpenAdvisories
Unscored CVE-2022-46705 EUVD-2022-49494GHSA-wx4m-4gqh-j3gc

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 …

Published Feb 27, 2023 · Updated Aug 3, 2024 · Assigned by apple

Vendor: Apple Product: macOS Package: qtwebkit-opensource-src Package: qtwebkit-source Package: webkit2gtk Package: webkit2gtk Package: webkitgtk Package: wpewebkit Package: wpewebkit Platform: macOS Ecosystem: Debian Ecosystem: Ubuntu

Description

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, Safari 16.2. Visiting a malicious website may lead to address bar spoofing.

Affected products

VendorProductAffectedFixed
Apple macOS unspecified – < 13.1, unspecified – < 16.2 13.1

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 wpewebkit +1 2.38.4-1 —
Debian 13 wpewebkit +1 2.38.4-1 —
Debian 12 wpewebkit +1 2.38.4-1 —
Debian 11 webkit2gtk 2.38.4-2~deb11u1 DSA-5340-1
Debian 11 wpewebkit 2.38.4-1~deb11u1 DSA-5341-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS qtwebkit-opensource-src No fix yet —
Ubuntu 22.04 LTS webkit2gtk 2.38.4-0ubuntu0.22.04.1 —
Ubuntu 22.04 LTS wpewebkit +1 No fix yet —
Ubuntu 20.04 LTS webkit2gtk 2.38.4-0ubuntu0.20.04.2 —
Ubuntu 20.04 LTS wpewebkit +1 No fix yet —
Ubuntu 18.04 LTS webkitgtk +3 No fix yet —
Ubuntu 16.04 LTS webkitgtk +3 No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 webkit2gtk3 +3 2.40.5-1.el9 RHSA-2023:6535
RHEL 8 webkit2gtk3 +3 2.40.5-1.el8 RHSA-2023:7055
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 7 ELS webkitgtk4 +4 2.48.3-2.el7_9 RHSA-2025:10364

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP5 webkit2gtk3 +2 2.42.2-150400.4.64.2 SUSE-SU-2023:4561-1
SLES 15 SP4 webkit2gtk3 +2 2.42.2-150400.4.64.2 SUSE-SU-2023:4561-1
SLES 15 SP3 webkit2gtk3 2.42.2-150200.91.1 SUSE-SU-2023:4558-1
SLES 15 SP2 webkit2gtk3 2.42.2-150200.91.1 SUSE-SU-2023:4558-1
SLES 15 SP1 webkit2gtk3 2.42.2-150000.3.157.1 SUSE-SU-2023:4559-1
Show 9 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 webkit2gtk3 2.42.2-2.158.2 SUSE-SU-2023:4651-1
SLES for SAP 15 SP3 webkit2gtk3 2.42.2-150200.91.1 SUSE-SU-2023:4558-1
SLES for SAP 15 SP2 webkit2gtk3 2.42.2-150200.91.1 SUSE-SU-2023:4558-1
SLES for SAP 15 SP1 webkit2gtk3 2.42.2-150000.3.157.1 SUSE-SU-2023:4559-1
SLES for SAP 12 SP5 webkit2gtk3 2.42.2-2.158.2 SUSE-SU-2023:4651-1
SLE HPC 15 SP3 webkit2gtk3 2.42.2-150200.91.1 SUSE-SU-2023:4558-1
SLE HPC 15 SP2 webkit2gtk3 2.42.2-150200.91.1 SUSE-SU-2023:4558-1
SLE HPC 15 SP1 webkit2gtk3 2.42.2-150000.3.157.1 SUSE-SU-2023:4559-1
SUSE Enterprise Storage 7.1 webkit2gtk3 2.42.2-150200.91.1 SUSE-SU-2023:4558-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Leap 15.5 webkit2gtk3 +2 2.42.2-150400.4.64.2 SUSE-SU-2023:4561-1
openSUSE Leap 15.4 webkit2gtk3 +2 2.42.2-150400.4.64.2 SUSE-SU-2023:4561-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 webkitgtk4 +3 2.42.3-3.amzn2.0.1 ALAS2-2024-2427

Advisories 11

References