vulnerability

Red Hat: CVE-2022-46705: webkitgtk: Visiting a malicious website may lead to address bar spoofing (Multiple Advisories)

Name: Red Hat: CVE-2022-46705: webkitgtk: Visiting a malicious website may lead to address bar spoofing (Multiple Advisories)
Creator: Red Hat
Published: 2023-02-27T00:00:00.000Z
Keywords: CVE, Red Hat, 2022, 46705, webkitgtk, no-fix-redhat-rpm-package, redhat-upgrade-webkitgtk4, redhat-upgrade-webkitgtk4-debuginfo, redhat-upgrade-webkitgtk4-devel, redhat-upgrade-webkitgtk4-doc, redhat-upgrade-webkitgtk4-jsc, redhat-upgrade-webkitgtk4-jsc-devel, Severity 4

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:P/A:N)

Published

Feb 27, 2023

Added

Jul 9, 2025

Modified

Jun 17, 2026

Description

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, Safari 16.2. Visiting a malicious website may lead to address bar spoofing.

Solutions

no-fix-redhat-rpm-packageredhat-upgrade-webkitgtk4redhat-upgrade-webkitgtk4-debuginforedhat-upgrade-webkitgtk4-develredhat-upgrade-webkitgtk4-docredhat-upgrade-webkitgtk4-jscredhat-upgrade-webkitgtk4-jsc-devel

References

EUVD-EUVD-2022-49494
NVD-CVE-2022-46705
REDHAT-RHSA-2025:10364
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-49494

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report