CVE Watch—

CVE-2022-22620

Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability

CVSS

—

No CVSS

EPSS

16.3%

p97

KEV

YES

Feb 11, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

16.3%EPSS · 30 days16.3%

2026-06-302026-07-16

KEV catalog record

Product

Apple / iOS, iPadOS, and macOS

Vulnerability

Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability

Added to KEV

Feb 11, 2022

Remediate by

Feb 25, 2022

Known ransomware use

Summary description

Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2022-22620

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2023-28206—

97.6%

KEV—79Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability—CVE-2025-43300—

97.1%

KEV—79Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability—CVE-2023-41064—

96.4%

KEV—79Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability—CVE-2021-30858—

96.0%

KEV—79Apple iOS, iPadOS, macOS Use-After-Free Vulnerability—CVE-2021-1870—

94.1%

KEV—78Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability—CVE-2021-1871—

93.5%

KEV—78Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability—