CVE-2022-22590: Use After Free
A flaw was found in WebKitGTK. An use-after-free issue was addressed with improved memory management.
Reference: https://webkitgtk.org/security/WSA-2022-0002.html
Other sources
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may lead to arbitrary code execution.
— MITRE
WebKit. A use after free issue was addressed with improved memory management.
Credit
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2022-22590?
CVE-2022-22590 is a vulnerability in WebKit that involves a use-after-free issue that has been addressed with improved memory management.
What are the affected software versions by CVE-2022-22590?
CVE-2022-22590 affects Apple Safari version up to, but excluding, 15.3, watchOS version up to, but excluding, 8.4, Apple iOS version up to, but excluding, 15.3, Apple iPadOS version up to, but excluding, 15.3, Apple tvOS version up to, but excluding, 15.3, and Apple macOS Monterey version up to, but excluding, 12.2.
How can I fix the CVE-2022-22590 vulnerability?
To fix the CVE-2022-22590 vulnerability, you should update your affected software to the latest available version provided by Apple.
Where can I find more information about CVE-2022-22590?
You can find more information about CVE-2022-22590 on the official Apple support website. Here are some relevant links: [Link 1](https://support.apple.com/en-us/HT213054), [Link 2](https://support.apple.com/en-us/HT213053), [Link 3](https://support.apple.com/en-us/HT213058).
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-22590?
The Common Weakness Enumeration (CWE) ID for CVE-2022-22590 is 416.