Name: CVE-2022-32891: Improper Restriction of Rendered UI Layers or Frames
Creator: Rapid7
Published: 2023-02-27T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2022-32891, CWE-1021, CVSS 6.1, EPSS 0.00121

The issue was addressed with improved UI handling. This issue is fixed in Safari 16, tvOS 16, watchOS 9, iOS 16. Visiting a website that frames malicious content may lead to UI spoofing.

CVSS Details

CVSS 3.1 Base Score: 6.1
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Apple Safari	—	Uninstall Apple Safari on WindowsUpgrade to Apple Safari version 16	Sep 13, 2022	Sep 13, 2022
Arch Linux	—	Upgrade to the latest version of Arch Linux	Jul 11, 2025	Feb 27, 2023
Centos_linux	—	Upgrade glib2-famUpgrade webkit2gtk3-jsc-debuginfoUpgrade glib2-tests-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade glib2-testsUpgrade webkit2gtk3-devel-debuginfoUpgrade webkit2gtk3-jscUpgrade glib2-develUpgrade glib2-debuginfoUpgrade glib2-debugsourceUpgrade glib2-devel-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade webkit2gtk3-develUpgrade glib2-fam-debuginfoUpgrade webkit2gtk3Upgrade glib2	Aug 31, 2023	Feb 27, 2023
Debian	—	Upgrade webkit2gtkUpgrade wpewebkit	Sep 21, 2022	Sep 21, 2022
Gentoo Linux	—	Upgrade net-libs/webkit-gtk.	May 31, 2023	Feb 27, 2023
Redhat_linux	—	Upgrade webkit2gtk3-debugsourceUpgrade glib2-docUpgrade webkit2gtk3Upgrade glib2-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade glib2No solution existsUpgrade webkitgtk4-develUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade glib2-famUpgrade webkitgtk4Upgrade webkitgtk4-debuginfoUpgrade webkitgtk4-docUpgrade glib2-fam-debuginfoUpgrade glib2-staticUpgrade glib2-devel-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade glib2-tests-debuginfoUpgrade glib2-debugsourceUpgrade glib2-develUpgrade webkitgtk4-jscUpgrade webkit2gtk3-jsc-develUpgrade glib2-testsUpgrade webkit2gtk3-jscUpgrade webkitgtk4-jsc-develUpgrade webkit2gtk3-devel	Aug 31, 2023	Feb 27, 2023
Ubuntu	—	Upgrade webkit2gtk	Nov 19, 2024	Feb 27, 2023

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence