High severity8.8NVD Advisory· Published Sep 23, 2022· Updated Jun 17, 2026

CVE-2022-22629

Description

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./iTunes2 versions
cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*+ 1 more
- cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*range: <12.12.3
- (no CPE)range: = 12.12.3
Apple Inc./Safari3 versions
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*range: <15.4
- (no CPE)range: unspecified
- (no CPE)range: = 15.4
Apple Inc./Ipados2 versions
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <15.4
- (no CPE)range: = 15.4
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <15.4
Apple Inc./macOS
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Range: >=12.0.0,<12.3
Apple Inc./tvOS3 versions
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*range: <15.4
- (no CPE)range: unspecified
- (no CPE)range: = 15.4
Apple Inc./watchOS3 versions
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*range: <8.5
- (no CPE)range: unspecified
- (no CPE)range: = 8.5
Apple Inc./macOS Montereyllm-fuzzy
Range: = 12.3
Apple Inc./iOSllm-fuzzy
Range: = 15.4
osv-coords42 versions
pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP2 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2015.4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS pkg:rpm/almalinux/webkit2gtk3 pkg:rpm/almalinux/webkit2gtk3-devel pkg:rpm/almalinux/webkit2gtk3-jsc pkg:rpm/almalinux/webkit2gtk3-jsc-devel pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/webkit2gtk3&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCL pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Manager%20Proxy%204.1 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1 pkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2015.3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Manager%20Server%204.1 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%206
< 2.36.0-150000.3.100.1+ 41 more
- (no CPE)range: < 2.36.0-150000.3.100.1
- (no CPE)range: < 2.36.0-2.96.1
- (no CPE)range: < 2.36.0-2.96.1
- (no CPE)range: < 2.36.0-150200.32.1
- (no CPE)range: < 2.36.0-150200.32.1
- (no CPE)range: < 2.36.0-150200.32.1
- (no CPE)range: < 2.36.0-150200.32.1
- (no CPE)range: < 2.36.0-150200.32.1
- (no CPE)range: < 2.36.0-150000.3.100.1
- (no CPE)range: < 2.36.0-150000.3.100.1
- (no CPE)range: < 2.36.0-150000.3.100.1
- (no CPE)range: < 2.36.0-150000.3.100.1
- (no CPE)range: < 2.36.0-150000.3.100.1
- (no CPE)range: < 2.36.0-150000.3.100.1
- (no CPE)range: < 2.36.0-150000.3.100.1
- (no CPE)range: < 2.36.0-2.96.1
- (no CPE)range: < 2.36.0-2.96.1
- (no CPE)range: < 2.36.0-2.96.1
- (no CPE)range: < 2.36.0-2.96.1
- (no CPE)range: < 2.36.0-2.96.1
- (no CPE)range: < 2.36.7-1.el8
- (no CPE)range: < 2.36.7-1.el8
- (no CPE)range: < 2.36.7-1.el8
- (no CPE)range: < 2.36.7-1.el8
- (no CPE)range: < 2.36.0-150200.32.1
- (no CPE)range: < 2.36.0-2.96.1
- (no CPE)range: < 2.36.0-2.96.1
- (no CPE)range: < 2.36.0-2.96.1
- (no CPE)range: < 2.36.0-2.96.1
- (no CPE)range: < 2.36.0-2.96.1
- (no CPE)range: < 2.36.0-150200.32.1
- (no CPE)range: < 2.36.0-150200.32.1
- (no CPE)range: < 2.36.0-150200.32.1
- (no CPE)range: < 2.36.0-150200.32.1
- (no CPE)range: < 2.36.0-150200.32.1
- (no CPE)range: < 2.36.0-150200.32.1
- (no CPE)range: < 2.36.0-150200.32.1
- (no CPE)range: < 2.36.0-150200.32.1
- (no CPE)range: < 2.36.0-150000.3.100.1
- (no CPE)range: < 2.36.0-2.96.1
- (no CPE)range: < 2.36.0-2.96.1
- (no CPE)range: < 2.36.0-150000.3.100.1

Patches

Vulnerability mechanics

References

support.apple.com/en-us/HT213182nvdRelease NotesVendor Advisory
support.apple.com/en-us/HT213183nvdRelease NotesVendor Advisory
support.apple.com/en-us/HT213186nvdRelease NotesVendor Advisory
support.apple.com/en-us/HT213187nvdRelease NotesVendor Advisory
support.apple.com/en-us/HT213188nvdRelease NotesVendor Advisory
support.apple.com/en-us/HT213193nvdRelease NotesVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000