Apple Products Remote Code Execution Vulnerability

A vulnerability was identified in Apple Products. A remote attacker could exploit this vulnerability to trigger remote code execution on the targeted system.

This vulnerability is being triggered due to a use-after-free error when processing HTML content in WebKit. The attacker can exploit this vulnerability by luring users to visit a specially crafted web page. Once the users open the malicious web page, an attacker can remotely execute malicious code on the targeted system.

HKCERT is aware of this vulnerability has been reported publicly that it is being exploited in the wild, and encourages users and administrators to review the security update pages for the affected products and apply the related updates as soon as possible.

Note:
CVE-2022-22620 is being exploited in the wild.