CVE-2022-48503

HighCVSS 8.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-129

Affected software

No affected versions have been published.

Timeline

Published
Aug 14, 2023
Last modified
Jun 17, 2026
Added to CISA KEV
Oct 20, 2025
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-485045.5The issue was addressed with improved handling of caches. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitiCVE-2022-485055.5This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to modify protected partCVE-2022-485062.4A flawed pseudorandom number generator in Dominion Voting Systems ImageCast Precinct (ICP and ICP2) and ImageCast Evolution (ICE) scanners aCVE-2022-485077.5Vulnerability of identity verification being bypassed in the storage module. Successful exploitation of this vulnerability may affect servicCVE-2022-485087.5Inappropriate authorization vulnerability in the system apps. Successful exploitation of this vulnerability may affect service integrity.CVE-2022-485095.9Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulCVE-2022-48515.3Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-485109.8Input verification vulnerability in the AMS module. Successful exploitation of this vulnerability will cause unauthorized operations.CVE-2022-485119.8Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions. Successful exploitation of this vulnerability maCVE-2022-485129.8Use After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decodinCVE-2022-485139.8Vulnerability of identity verification being bypassed in the Gallery module. Successful exploitation of this vulnerability may cause out-of-CVE-2022-485147.5The Sepolicy module has inappropriate permission control on the use of Netlink.Successful exploitation of this vulnerability may affect conf
CVE-2022-48503: High severity, CVSS 8.8 | Vulnix