Skip to content
COOEY

EXPOSURES › CVE-2022-22620

CVE-2022-22620

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2022-02-11 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2022-22620 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 78/100 rceexploited-in-wildunpatched

Apple's WebKit in iOS, iPadOS, and macOS suffered a use-after-free vulnerability allowing remote code execution via malicious web content.

A use-after-free flaw in WebKit enabled attackers to execute arbitrary code by processing crafted web pages, directly impacting Apple devices and any software relying on WebKit. This is a critical failure for DIB organizations because it represents an unpatched, actively exploited vulnerability that could compromise endpoint security and violate CMMC/NIST 800-171 controls around software integrity and patch management. Organizations must ensure all WebKit-dependent systems are patched immediately and monitor for similar flaws in third-party components.

Shame score — A use-after-free vulnerability in a core browser engine was actively exploited in the wild, indicating a failure to patch a known, high-severity flaw before it was weaponized.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED
apple · vendoriOS, iPadOS, and macOS · product
DESCRIPTION

Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

SENTIMENT · TRUSTED SOURCES
synthesis neutral +0.00
No sentiment expressed; sources are CVE databases or vendor support pages without commentary on Apple's handling.
cooey ↗ neutral +0.00
Neutral; CVE database entry with no commentary on vendor response.
"Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content."
support.apple.com ↗ neutral +0.00
Neutral; Vendor support page with no commentary on the specific CVE.
"This document lists security updates for Apple software."
app.opencve.io ↗ neutral +0.00
Neutral; CVE database listing with no commentary on vendor response.
"CVE-2026-81984 3 Adobe , Apple , Microsoft"
www.cvefind.com ↗ neutral +0.00
Neutral; CVE database listing with no commentary on vendor response.
"CVE, short for Common Vulnerabilities and Exposures, is a list of publicly disclosed computer security flaws."
www.strix.ai ↗ neutral +0.00
Neutral; CVE database listing with no commentary on vendor response.
"CVE Vulnerability Database Search and browse 389,943 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status."
securityonline.info ↗ neutral +0.00
Neutral; CVE database listing with no commentary on vendor response.
"CVE-2026-84869 ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability"
securityonline.info ↗ neutral +0.00
Neutral; CVE database listing with no commentary on vendor response.
"Weekly CVE Report: Daily Cybersecurity Beats CISA KEV on Exploited Flaws"
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.