CVE-2022-32868: Apple iPadOS

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

A logic issue was addressed with improved state management. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. A website may be able to track users through Safari web extensions.

Affected products

• Apple iPadOS: before 15.7 (fixed in 15.7)
• Apple iPhone OS: before 15.7 (fixed in 15.7)
• Apple Safari: before 16.0 (fixed in 16.0)

Published 2022-09-20. Last modified 2026-06-17.