Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2022-22594

Date: March 18, 2022

A cross-origin issue in the IndexDB API was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. A website may be able to track sensitive user information.

Severity Score

Related Resources (11)

https://nvd.nist.gov/vuln/detail/CVE-2022-22594
https://support.apple.com/en-us/HT213053
https://access.redhat.com/security/cve/CVE-2022-22594
https://security-tracker.debian.org/tracker/CVE-2022-22594
https://support.apple.com/en-us/HT213057
https://support.apple.com/en-us/HT213054
https://support.apple.com/en-us/HT213058
https://security.alpinelinux.org/vuln/CVE-2022-22594
https://support.apple.com/en-us/HT213059
https://people.canonical.com/~ubuntu-security/cve/CVE-2022-22594
https://www.mend.io/vulnerability-database/CVE-2022-22594

Severity Score

Weakness Type (CWE)

Origin Validation Error

CWE-346

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): NONE
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): PARTIAL
Integrity (I): NONE
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us