VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Nov 1, 2022· Updated Jun 17, 2026

CVE-2022-42813

CVE-2022-42813

Description

A certificate validation issue existed in the handling of WKWebView. This issue was addressed with improved validation. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. Processing a maliciously crafted certificate may lead to arbitrary code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Apple Inc./Ipados
    cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
    Range: <16.0
  • Apple Inc./Iphone OS
    cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
    Range: <16.1
  • Apple Inc./macOS3 versions
    cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: <13.0
    • (no CPE)range: <13
    • (no CPE)range: unspecified
  • Apple Inc./tvOS2 versions
    cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*range: <16.1
    • (no CPE)range: unspecified
  • Apple Inc./watchOS2 versions
    cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*range: <9.1
    • (no CPE)range: unspecified
  • Apple Inc./WKWebViewllm-fuzzy
  • Apple Inc./iOSllm-fuzzy
    Range: <16.1

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.