CVE-2022-46725
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input...
4.3 MediumFix available
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.4 and iPadOS 16.4. Visiting a malicious website may lead to address bar spoofing.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Exploit likelihood
0.60%Up 0.6 points since Aug 15, 2023
What each source reports
NVD Score used
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.4 and iPadOS 16.4. Visiting a malicious website may lead to address bar spoofing.
- Record
CVE-2022-46725- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
CVE ListNo score
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.4 and iPadOS 16.4. Visiting a malicious website may lead to address bar spoofing.
- Record
CVE-2022-46725- Updated
- 2026-11-02
EUVDEUVD-2022-49514No score
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.4 and iPadOS 16.4. Visiting a malicious website may lead to address bar spoofing.
- Record
EUVD-2022-49514- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-43qx-6r5f-7vgw
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input...
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.4 and iPadOS 16.4. Visiting a malicious website may lead to address bar spoofing.
- Record
GHSA-43qx-6r5f-7vgw- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSV
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.4 and iPadOS 16.4. Visiting a malicious website may lead to address bar spoofing.
- Record
CVE-2022-46725- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-46725
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.4 and iPadOS 16.4. Visiting a malicious website may lead to address bar spoofing.
- Record
DEBIAN-CVE-2022-46725- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Updated
- 2026-11-03
Show 8 moreShow less
OSVRHSA-2023:6535
Red Hat Security Advisory: webkit2gtk3 security, bug fix, and enhancement update
- Record
RHSA-2023:6535- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:7055
Red Hat Security Advisory: webkit2gtk3 security, bug fix, and enhancement update
- Record
RHSA-2023:7055- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2025:10364
Red Hat Security Advisory: webkitgtk4 security update
- Record
RHSA-2025:10364- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-46725
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.4 and iPadOS 16.4. Visiting a malicious website may lead to address bar spoofing.
- Record
UBUNTU-CVE-2022-46725- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVSUSE-SU-2023:4558-1No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Update to version 2.42.2 (bsc#1217210):
- CVE-2023-41983: Processing web content may lead to a denial-of-service.
- CVE-2023-42852: Processing web content may lead to arbitrary code execution.
Already previously fixed:
- CVE-2022-32919: Visiting a website that frames malicious content may lead to UI spoofing (fixed already in 2.38.4).
- CVE-2022-32933: A website may be able to track the websites a user visited in private browsing mode (fixed already in 2.38.0).
- CVE-2022-46705: Visiting a malicious website may lead to address bar spoofing (fixed already in 2.38.4).
- CVE-2022-46725: Visiting a malicious website may lead to address bar spoofing (fixed already in 2.38.4).
- CVE-2023-32359: A user’s password may be read aloud by a text-to-speech accessibility feature (fixed already in 2.42.0).
Bug fixes:
- Disable DMABuf renderer for NVIDIA proprietary drivers (bsc#1216778).
- Record
SUSE-SU-2023:4558-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4559-1No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Update to version 2.42.2 (bsc#1217210):
- CVE-2023-41983: Processing web content may lead to a denial-of-service.
- CVE-2023-42852: Processing web content may lead to arbitrary code execution.
Already previously fixed:
- CVE-2022-32919: Visiting a website that frames malicious content may lead to UI spoofing (fixed already in 2.38.4).
- CVE-2022-32933: A website may be able to track the websites a user visited in private browsing mode (fixed already in 2.38.0).
- CVE-2022-46705: Visiting a malicious website may lead to address bar spoofing (fixed already in 2.38.4).
- CVE-2022-46725: Visiting a malicious website may lead to address bar spoofing (fixed already in 2.38.4).
- CVE-2023-32359: A user’s password may be read aloud by a text-to-speech accessibility feature (fixed already in 2.42.0).
Bug fixes:
- Disable DMABuf renderer for NVIDIA proprietary drivers (bsc#1216778).
- Record
SUSE-SU-2023:4559-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4561-1No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Update to version 2.42.2 (bsc#1217210):
- CVE-2023-41983: Processing web content may lead to a denial-of-service.
- CVE-2023-42852: Processing web content may lead to arbitrary code execution.
Already previously fixed:
- CVE-2022-32919: Visiting a website that frames malicious content may lead to UI spoofing (fixed already in 2.38.4).
- CVE-2022-32933: A website may be able to track the websites a user visited in private browsing mode (fixed already in 2.38.0).
- CVE-2022-46705: Visiting a malicious website may lead to address bar spoofing (fixed already in 2.38.4).
- CVE-2022-46725: Visiting a malicious website may lead to address bar spoofing (fixed already in 2.38.4).
- CVE-2023-32359: A user’s password may be read aloud by a text-to-speech accessibility feature (fixed already in 2.42.0).
- Record
SUSE-SU-2023:4561-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4651-1No score
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Update to version 2.42.2 (bsc#1217210):
- CVE-2023-41983: Processing web content may lead to a denial-of-service.
- CVE-2023-42852: Processing web content may lead to arbitrary code execution.
Already previously fixed:
- CVE-2022-32919: Visiting a website that frames malicious content may lead to UI spoofing (fixed already in 2.38.4).
- CVE-2022-32933: A website may be able to track the websites a user visited in private browsing mode (fixed already in 2.38.0).
- CVE-2022-46705: Visiting a malicious website may lead to address bar spoofing (fixed already in 2.38.4).
- CVE-2022-46725: Visiting a malicious website may lead to address bar spoofing (fixed already in 2.38.4).
- CVE-2023-32359: A user’s password may be read aloud by a text-to-speech accessibility feature (fixed already in 2.42.0).
Bug fixes:
- Disable DMABuf renderer for NVIDIA proprietary drivers (bsc#1216778).
- Record
SUSE-SU-2023:4651-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
webkit2gtkDebian:12 | before 2.38.4-1 | 2.38.4-1 |
webkit2gtkDebian:13 | before 2.38.4-1 | 2.38.4-1 |
webkit2gtkDebian:14 | before 2.38.4-1 | 2.38.4-1 |
wpewebkitDebian:12 | before 2.38.4-1 | 2.38.4-1 |
wpewebkitDebian:13 | before 2.38.4-1 | 2.38.4-1 |
wpewebkitDebian:14 | before 2.38.4-1 | 2.38.4-1 |
webkit2gtkDebian:11 From an advisory covering 6 CVEs | before 2.38.4-2~deb11u1, plus listed versions 2.32.3-12.32.4-12.32.4-1~deb10u12.32.4-1~deb11u12.33.1-1 Show 45 moreShow less2.33.2-12.33.3-12.33.90-12.33.91-12.34.0-12.34.0-1~bpo11+12.34.1-12.34.1-1~deb10u12.34.1-1~deb11u12.34.2-12.34.2-1~bpo11+12.34.3-12.34.3-1~deb10u12.34.3-1~deb11u12.34.4-12.34.4-1~deb10u12.34.4-1~deb11u12.34.5-12.34.6-12.34.6-1~deb10u12.34.6-1~deb11u12.35.1-12.35.2-12.35.3-12.35.90-12.36.0-12.36.0-22.36.0-32.36.0-3~deb10u12.36.0-3~deb11u12.36.1-12.36.2-12.36.3-12.36.3-1~deb10u12.36.3-1~deb11u12.36.4-12.36.4-1~deb10u12.36.4-1~deb11u12.36.6-12.36.6-1~deb10u12.36.6-1~deb11u12.36.7-12.36.7-1~deb10u12.36.7-1~deb11u12.37.1-1 | 2.38.4-2~deb11u1 |
wpewebkitDebian:11 From an advisory covering 6 CVEs | before 2.38.4-1~deb11u1, plus listed versions 2.32.3-22.32.4-12.32.4-1~deb11u12.34.1-12.34.1-1~deb11u1 Show 27 moreShow less2.34.2-12.34.3-12.34.3-1~deb11u12.34.4-12.34.4-1~deb11u12.34.5-12.34.6-12.34.6-1~deb11u12.36.0-12.36.0-22.36.0-2~deb11u12.36.1-12.36.3-12.36.3-1~deb11u12.36.4-12.36.4-1~deb11u12.36.6-12.36.6-1~deb11u12.36.7-12.36.7-1~deb11u12.38.0-12.38.0-1~deb11u12.38.1-12.38.2-12.38.2-1~deb11u12.38.3-12.38.3-1~deb11u1 | 2.38.4-1~deb11u1 |
webkit2gtk3Red Hat:enterprise_linux:9::appstream From an advisory covering 22 CVEs | before 0:2.40.5-1.el9 | 0:2.40.5-1.el9 |
webkit2gtk3-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 22 CVEs | before 0:2.40.5-1.el9 | 0:2.40.5-1.el9 |
Show 64 moreShow less
| Package | Affected | Fixed |
|---|---|---|
webkit2gtk3-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 22 CVEs | before 0:2.40.5-1.el9 | 0:2.40.5-1.el9 |
webkit2gtk3-develRed Hat:enterprise_linux:9::appstream From an advisory covering 22 CVEs | before 0:2.40.5-1.el9 | 0:2.40.5-1.el9 |
webkit2gtk3-devel-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 22 CVEs | before 0:2.40.5-1.el9 | 0:2.40.5-1.el9 |
webkit2gtk3-jscRed Hat:enterprise_linux:9::appstream From an advisory covering 22 CVEs | before 0:2.40.5-1.el9 | 0:2.40.5-1.el9 |
webkit2gtk3-jsc-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 22 CVEs | before 0:2.40.5-1.el9 | 0:2.40.5-1.el9 |
webkit2gtk3-jsc-develRed Hat:enterprise_linux:9::appstream From an advisory covering 22 CVEs | before 0:2.40.5-1.el9 | 0:2.40.5-1.el9 |
webkit2gtk3-jsc-devel-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 22 CVEs | before 0:2.40.5-1.el9 | 0:2.40.5-1.el9 |
webkit2gtk3Red Hat:enterprise_linux:8::appstream From an advisory covering 22 CVEs | before 0:2.40.5-1.el8 | 0:2.40.5-1.el8 |
webkit2gtk3-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 22 CVEs | before 0:2.40.5-1.el8 | 0:2.40.5-1.el8 |
webkit2gtk3-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 22 CVEs | before 0:2.40.5-1.el8 | 0:2.40.5-1.el8 |
webkit2gtk3-develRed Hat:enterprise_linux:8::appstream From an advisory covering 22 CVEs | before 0:2.40.5-1.el8 | 0:2.40.5-1.el8 |
webkit2gtk3-devel-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 22 CVEs | before 0:2.40.5-1.el8 | 0:2.40.5-1.el8 |
webkit2gtk3-jscRed Hat:enterprise_linux:8::appstream From an advisory covering 22 CVEs | before 0:2.40.5-1.el8 | 0:2.40.5-1.el8 |
webkit2gtk3-jsc-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 22 CVEs | before 0:2.40.5-1.el8 | 0:2.40.5-1.el8 |
webkit2gtk3-jsc-develRed Hat:enterprise_linux:8::appstream From an advisory covering 22 CVEs | before 0:2.40.5-1.el8 | 0:2.40.5-1.el8 |
webkit2gtk3-jsc-devel-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 22 CVEs | before 0:2.40.5-1.el8 | 0:2.40.5-1.el8 |
webkitgtk4Red Hat:rhel_els:7 From an advisory covering 230 CVEs | before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkitgtk4-debuginfoRed Hat:rhel_els:7 From an advisory covering 230 CVEs | before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkitgtk4-develRed Hat:rhel_els:7 From an advisory covering 230 CVEs | before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkitgtk4-jscRed Hat:rhel_els:7 From an advisory covering 230 CVEs | before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkitgtk4-jsc-develRed Hat:rhel_els:7 From an advisory covering 230 CVEs | before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkitgtk4-docRed Hat:rhel_els:7 From an advisory covering 230 CVEs | before 0:2.48.3-2.el7_9 | 0:2.48.3-2.el7_9 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 7 CVEs | before 2.42.2-150200.91.1 | 2.42.2-150200.91.1 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 7 CVEs | before 2.42.2-150200.91.1 | 2.42.2-150200.91.1 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 7 CVEs | before 2.42.2-150200.91.1 | 2.42.2-150200.91.1 |
webkit2gtk3SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 7 CVEs | before 2.42.2-150200.91.1 | 2.42.2-150200.91.1 |
webkit2gtk3SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 7 CVEs | before 2.42.2-150200.91.1 | 2.42.2-150200.91.1 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 7 CVEs | before 2.42.2-150200.91.1 | 2.42.2-150200.91.1 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 7 CVEs | before 2.42.2-150200.91.1 | 2.42.2-150200.91.1 |
webkit2gtk3SUSE:Enterprise Storage 7.1 From an advisory covering 7 CVEs | before 2.42.2-150200.91.1 | 2.42.2-150200.91.1 |
webkit2gtk3SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 7 CVEs | before 2.42.2-150000.3.157.1 | 2.42.2-150000.3.157.1 |
webkit2gtk3SUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 7 CVEs | before 2.42.2-150000.3.157.1 | 2.42.2-150000.3.157.1 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 7 CVEs | before 2.42.2-150000.3.157.1 | 2.42.2-150000.3.157.1 |
webkit2gtk3-soup2SUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 7 CVEs | before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk3-soup2SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 7 CVEs | before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk3SUSE:Linux Enterprise Module for Desktop Applications 15 SP4 From an advisory covering 7 CVEs | before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk3SUSE:Linux Enterprise Module for Desktop Applications 15 SP5 From an advisory covering 7 CVEs | before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk4SUSE:Linux Enterprise Module for Development Tools 15 SP4 From an advisory covering 7 CVEs | before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk4SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 7 CVEs | before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk3openSUSE:Leap 15.4 From an advisory covering 7 CVEs | before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk3-soup2openSUSE:Leap 15.4 From an advisory covering 7 CVEs | before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk4openSUSE:Leap 15.4 From an advisory covering 7 CVEs | before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk3openSUSE:Leap 15.5 From an advisory covering 7 CVEs | before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk3-soup2openSUSE:Leap 15.5 From an advisory covering 7 CVEs | before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk4openSUSE:Leap 15.5 From an advisory covering 7 CVEs | before 2.42.2-150400.4.64.2 | 2.42.2-150400.4.64.2 |
webkit2gtk3SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 7 CVEs | before 2.42.2-2.158.2 | 2.42.2-2.158.2 |
webkit2gtk3SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 7 CVEs | before 2.42.2-2.158.2 | 2.42.2-2.158.2 |
webkit2gtk3SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 7 CVEs | before 2.42.2-2.158.2 | 2.42.2-2.158.2 |
webkit2gtk3SUSE:Linux Enterprise Workstation Extension 12 SP5 From an advisory covering 7 CVEs | before 2.42.2-2.158.2 | 2.42.2-2.158.2 |
qtwebkit-opensource-srcUbuntu:16.04:LTS | All versions, plus listed versions 5.4.2+dfsg-1ubuntu2.15.5.1+dfsg-2ubuntu1 | None known |
webkit2gtkUbuntu:16.04:LTS | All versions, plus listed versions 2.8.5+dfsg1-32.10.3+dfsg1-12.10.4+dfsg1-12.10.5-12.10.6-1 Show 21 moreShow less2.10.6-1ubuntu12.10.8-1ubuntu12.10.9-1ubuntu12.12.5-0ubuntu0.16.04.12.14.2-0ubuntu0.16.04.12.14.3-0ubuntu0.16.04.12.14.5-0ubuntu0.16.04.12.16.1-0ubuntu0.16.04.12.16.1-0ubuntu0.16.04.22.16.2-0ubuntu0.16.04.12.16.3-0ubuntu0.16.04.12.16.6-0ubuntu0.16.04.12.18.0-0ubuntu0.16.04.22.18.3-0ubuntu0.16.04.12.18.4-0ubuntu0.16.04.12.18.5-0ubuntu0.16.04.12.18.6-0ubuntu0.16.04.12.20.1-0ubuntu0.16.04.12.20.2-0ubuntu0.16.04.12.20.3-0ubuntu0.16.04.12.20.5-0ubuntu0.16.04.1 | None known |
qtwebkit-sourceUbuntu:16.04:LTS | All versions, plus listed versions 2.3.2-0ubuntu102.3.2-0ubuntu11 | None known |
webkitgtkUbuntu:16.04:LTS | All versions, plus listed versions 2.4.9-2ubuntu22.4.10-0ubuntu12.4.11-0ubuntu0.1 | None known |
webkit2gtkUbuntu:18.04:LTS | All versions, plus listed versions 2.18.0-22.18.0-2build12.18.2-12.18.3-12.18.4-1 Show 33 moreShow less2.18.6-12.19.91-1ubuntu12.19.92-12.20.0-12.20.0-22.20.0-2ubuntu12.20.1-12.20.2-0ubuntu0.18.04.12.20.3-0ubuntu0.18.04.12.20.5-0ubuntu0.18.04.12.22.2-0ubuntu0.18.04.12.22.2-0ubuntu0.18.04.22.22.4-0ubuntu0.18.04.12.22.5-0ubuntu0.18.04.12.22.6-0ubuntu0.18.04.12.24.1-0ubuntu0.18.04.12.24.2-0ubuntu0.18.04.12.24.4-0ubuntu0.18.04.12.26.1-0ubuntu0.18.04.12.26.2-0ubuntu0.18.04.12.26.3-0ubuntu0.18.04.12.26.4-0ubuntu0.18.04.12.28.0-0ubuntu0.18.04.32.28.1-0ubuntu0.18.04.12.28.2-0ubuntu0.18.04.12.28.3-0ubuntu0.18.04.12.28.4-0ubuntu0.18.04.12.30.3-0ubuntu0.18.04.12.30.5-0ubuntu0.18.04.12.30.6-0ubuntu0.18.04.12.32.0-0ubuntu0.18.04.12.32.3-0ubuntu0.18.04.12.32.4-0ubuntu0.18.04.1 | None known |
qtwebkit-opensource-srcUbuntu:18.04:LTS | All versions, plus listed versions 5.9.1+dfsg-5ubuntu15.9.1+dfsg-5ubuntu35.212.0~alpha2-5build25.212.0~alpha2-5build45.212.0~alpha2-75.212.0~alpha2-7build25.212.0~alpha2-7ubuntu1 | None known |
qtwebkit-sourceUbuntu:18.04:LTS | All versions, plus listed versions 2.3.2-0ubuntu13 | None known |
webkitgtkUbuntu:18.04:LTS | All versions, plus listed versions 2.4.11-32.4.11-3ubuntu22.4.11-3ubuntu3 | None known |
webkit2gtkUbuntu:20.04:LTS | before 2.38.4-0ubuntu0.20.04.2, plus listed versions 2.26.1-32.26.2-12.26.3-1ubuntu22.26.4-1ubuntu12.28.0-1ubuntu2 Show 23 moreShow less2.28.1-12.28.2-0ubuntu0.20.04.12.28.3-0ubuntu0.20.04.12.28.4-0ubuntu0.20.04.12.30.3-0ubuntu0.20.04.12.30.5-0ubuntu0.20.04.12.30.6-0ubuntu0.20.04.12.32.0-0ubuntu0.20.04.12.32.3-0ubuntu0.20.04.12.32.4-0ubuntu0.20.04.12.34.1-0ubuntu0.20.04.12.34.3-0ubuntu0.20.04.12.34.4-0ubuntu0.20.04.12.34.6-0ubuntu0.20.04.12.36.0-0ubuntu0.20.04.32.36.2-0ubuntu0.20.04.12.36.3-0ubuntu0.20.04.12.36.4-0ubuntu0.20.04.12.36.6-0ubuntu0.20.04.12.36.7-0ubuntu0.20.04.12.36.8-0ubuntu0.20.04.12.38.2-0ubuntu0.20.04.12.38.3-0ubuntu0.20.04.1 | 2.38.4-0ubuntu0.20.04.2 |
qtwebkit-opensource-srcUbuntu:20.04:LTS | All versions, plus listed versions 5.212.0~alpha3-35.212.0~alpha3-55.212.0~alpha3-65.212.0~alpha3-75.212.0~alpha4-15.212.0~alpha4-1ubuntu15.212.0~alpha4-1ubuntu25.212.0~alpha4-1ubuntu2.1 | None known |
wpewebkitUbuntu:20.04:LTS | All versions, plus listed versions 2.26.3-12.26.4-12.26.4-1build12.28.0-12.28.1-1 | None known |
qtwebkit-opensource-srcUbuntu:22.04:LTS | All versions, plus listed versions 5.212.0~alpha4-125.212.0~alpha4-135.212.0~alpha4-145.212.0~alpha4-14build15.212.0~alpha4-14ubuntu25.212.0~alpha4-15ubuntu1 | None known |
webkit2gtkUbuntu:22.04:LTS | before 2.38.4-0ubuntu0.22.04.1, plus listed versions 2.34.0-1ubuntu12.34.1-1ubuntu12.34.2-1ubuntu12.34.3-12.35.3-1ubuntu1 Show 10 moreShow less2.35.90-1ubuntu12.36.0-2ubuntu12.36.2-0ubuntu0.22.04.12.36.3-0ubuntu0.22.04.12.36.4-0ubuntu0.22.04.12.36.6-0ubuntu0.22.04.12.36.7-0ubuntu0.22.04.12.36.8-0ubuntu0.22.04.12.38.2-0ubuntu0.22.04.22.38.3-0ubuntu0.22.04.1 | 2.38.4-0ubuntu0.22.04.1 |
wpewebkitUbuntu:22.04:LTS | All versions, plus listed versions 2.32.4-12.34.1-12.34.2-12.34.3-12.34.4-1 Show 4 moreShow less2.34.5-12.34.6-12.36.0-2ubuntu22.36.0-2ubuntu3 | None known |
qtwebkit-opensource-srcUbuntu:24.04:LTS | All versions, plus listed versions 5.212.0~alpha4-335.212.0~alpha4-33build15.212.0~alpha4-345.212.0~alpha4-34ubuntu35.212.0~alpha4-34ubuntu45.212.0~alpha4-36 | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-46725 is a medium vulnerability (CVSS 4.3) in Apple Ipados, published February 6, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.60%, the 49th percentile. Fixed in webkit2gtk 2.38.4-1.
References
support.apple.com/en-us/HT213676
openwall.com/lists/oss-security/2023/11/15/1
nvd.nist.gov/vuln/detail/CVE-2022-46725
github.com/advisories/GHSA-43qx-6r5f-7vgw
security-tracker.debian.org/tracker/CVE-2022-46725
access.redhat.com/errata/RHSA-2023:6535
Show 194 moreShow less
docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.3_release_notes/index
bugzilla.redhat.com/show_bug.cgi?id=2176270
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6535.json
cve.org/CVERecord?id=CVE-2022-32885
webkitgtk.org/security/WSA-2023-0003.html
wpewebkit.org/security/WSA-2023-0008.html
cisa.gov/known-exploited-vulnerabilities-catalog
talosintelligence.com/vulnerability_reports/TALOS-2020-1214
bugs.webkit.org/show_bug.cgi?id=242683
seclists.org/fulldisclosure/2024/Mar/21
suse.com/support/update/announcement/2023/suse-su-20234558-1
bugzilla.suse.com/1216778
ubuntu.com/security/CVE-2022-46725
This page doesn't list everything
Left out here: 17 versions and 821 references. The JSON record has them.