CVE-2022-32891
Fixed in a distro release EPSS <1%
The issue was addressed with improved UI handling. This issue is fixed in Safari 16, tvOS 16, watchOS 9, iOS 16. Visiting a website that frames malicious content may lead to UI spoofing.
Products: Apple iOS, apple safari, Apple watchOS
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | webkit2gtk | 2.36.6-1~deb10u1 |
| Debian 11 | webkit2gtk | 2.36.6-1~deb11u1 |
| Debian 11 | wpewebkit | 2.36.6-1~deb11u1 |
| Debian 12 | webkit2gtk | 2.36.6-1 |
| Debian 12 | wpewebkit | 2.36.6-1 |
| Debian 13 | webkit2gtk | 2.36.6-1 |
| Debian 13 | wpewebkit | 2.36.6-1 |
| Debian 14 | webkit2gtk | 2.36.6-1 |
| Debian 14 | wpewebkit | 2.36.6-1 |
| Red Hat Enterprise Linux 8 | glib2 | 0:2.56.4-159.el8 |
| Red Hat Enterprise Linux 8 | glib2-debuginfo | 0:2.56.4-159.el8 |
| Red Hat Enterprise Linux 8 | glib2-debugsource | 0:2.56.4-159.el8 |
| Red Hat Enterprise Linux 8 | glib2-devel | 0:2.56.4-159.el8 |
| Red Hat Enterprise Linux 8 | glib2-devel-debuginfo | 0:2.56.4-159.el8 |
| Red Hat Enterprise Linux 8 | glib2-doc | 0:2.56.4-159.el8 |
| Red Hat Enterprise Linux 8 | glib2-fam | 0:2.56.4-159.el8 |
| Red Hat Enterprise Linux 8 | glib2-fam-debuginfo | 0:2.56.4-159.el8 |
| Red Hat Enterprise Linux 8 | glib2-static | 0:2.56.4-159.el8 |
| Red Hat Enterprise Linux 8 | glib2-tests | 0:2.56.4-159.el8 |
| Red Hat Enterprise Linux 8 | glib2-tests-debuginfo | 0:2.56.4-159.el8 |
| Red Hat Enterprise Linux 8 | webkit2gtk3 | 0:2.36.7-1.el8 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-debuginfo | 0:2.36.7-1.el8 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-debugsource | 0:2.36.7-1.el8 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-devel | 0:2.36.7-1.el8 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-devel-debuginfo | 0:2.36.7-1.el8 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc | 0:2.36.7-1.el8 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc-debuginfo | 0:2.36.7-1.el8 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc-devel | 0:2.36.7-1.el8 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc-devel-debuginfo | 0:2.36.7-1.el8 |
| Red Hat Enterprise Linux 9 | webkit2gtk3 | 0:2.36.7-1.el9 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-debuginfo | 0:2.36.7-1.el9 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-debugsource | 0:2.36.7-1.el9 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-devel | 0:2.36.7-1.el9 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-devel-debuginfo | 0:2.36.7-1.el9 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-jsc | 0:2.36.7-1.el9 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-jsc-debuginfo | 0:2.36.7-1.el9 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-jsc-devel | 0:2.36.7-1.el9 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-jsc-devel-debuginfo | 0:2.36.7-1.el9 |
| Red Hat rhel els 7 | webkitgtk4 | 0:2.48.3-2.el7_9 |
| Red Hat rhel els 7 | webkitgtk4-debuginfo | 0:2.48.3-2.el7_9 |
| Red Hat rhel els 7 | webkitgtk4-devel | 0:2.48.3-2.el7_9 |
| Red Hat rhel els 7 | webkitgtk4-doc | 0:2.48.3-2.el7_9 |
| Red Hat rhel els 7 | webkitgtk4-jsc | 0:2.48.3-2.el7_9 |
| Red Hat rhel els 7 | webkitgtk4-jsc-devel | 0:2.48.3-2.el7_9 |
| Ubuntu 16.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 16.04 LTS | qtwebkit-source | no fix |
| Ubuntu 16.04 LTS | webkit2gtk | no fix |
| Ubuntu 16.04 LTS | webkitgtk | no fix |
| Ubuntu 18.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 18.04 LTS | qtwebkit-source | no fix |
| Ubuntu 18.04 LTS | webkit2gtk | no fix |
| Ubuntu 18.04 LTS | webkitgtk | no fix |
| Ubuntu 20.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 20.04 LTS | webkit2gtk | 2.36.6-0ubuntu0.20.04.1 |
| Ubuntu 20.04 LTS | wpewebkit | no fix |
| Ubuntu 22.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 22.04 LTS | webkit2gtk | 2.36.6-0ubuntu0.22.04.1 |
| Ubuntu 22.04 LTS | wpewebkit | no fix |
| Ubuntu 24.04 LTS | qtwebkit-opensource-src | no fix |