CVE-2022-22628

What it actually does

Use-after-free condition in memory management during web content processing that can be leveraged for arbitrary code execution.

Why it matters to the business

Attackers could run malicious code on user devices after a victim visits a crafted web page, risking data theft, device compromise, and operational disruption; the vulnerability affects widely deployed client platforms with moderate exploit likelihood indicated by rising EPSS.

How an attack unfolds

An attacker hosts malicious web content that triggers the use-after-free when rendered; the victim is lured to the page and the flaw is exercised to achieve code execution in the context of the browser or system process.

How to fix it

Upgrade affected Apple platforms to the fixed releases: macOS Monterey 12.3, Safari 15.4, iOS 15.4, iPadOS 15.4, watchOS 8.5, tvOS 15.4. For the curl component listed, apply the commit 7161cb17c01dcff1dc5bf89a18437d9d729f1ecd.

How to confirm the fix worked

Verify installed versions against the listed fixed releases; inspect browser and system update logs to confirm patches are applied; test rendering of known proof-of-concept content in a controlled environment.

Typical attack path

1. Craft and host malicious web content exploiting the use-after-free
2. Lure victim to visit the page via phishing or compromised site
3. Browser or OS processes the content and triggers the memory flaw
4. Achieve arbitrary code execution on the target device

How to detect it

Review web browser process crash logs and memory-related error reports for signs of unexpected termination after content rendering; correlate with network logs showing visits to suspicious domains around the time of anomalies.

What your security team should do

• Prioritize patching of all listed Apple client platforms before the CISA-style urgency implied by public disclosure
• Block or filter untrusted web content sources where possible until patches are deployed
• Monitor EPSS trend for continued rise and reassess exploit maturity