CVE-2022-42837
CVSS v3
9.8
CRITICAL
EPSS Score
5.8 %
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, watchOS 9.2. A remote user may be able to cause unexpected app termination or arbitrary code execution.
Technical details
- Published
- 2022-12-15
Frequently asked questions
What is CVE-2022-42837?
An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, watchOS 9.2. A remote user may be able to cause unexpected app termination or arbitrary code execution.
Is CVE-2022-42837 actively exploited?
Active exploitation of CVE-2022-42837 has not been confirmed. The EPSS score is 5.8%, indicating the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2022-42837?
CVE-2022-42837 has a CVSS v3 base score of 9.8 (CRITICAL severity).
Is CVE-2022-42837 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
No credit card required · 500 free checks/month · Free API key
Other 2022 vulnerabilities worth triaging
Ranked by exploit probability (EPSS).