CVE-2022-32891

Summary

The issue was addressed with improved UI handling. This issue is fixed in Safari 16, tvOS 16, watchOS 9, iOS 16. Visiting a website that frames malicious content may lead to UI spoofing.

Affected Software

VendorProductVersion RangeStatus
AppleiOSunspecified < 16affected
AppleSafariunspecified < 16affected
ApplewatchOSunspecified < 9affected
ApplewatchOSunspecified < 16affected

Weaknesses

  • Visiting a website that frames malicious content may lead to UI spoofing

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References