CVE-2022-32891: Apple iPhone OS

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

The issue was addressed with improved UI handling. This issue is fixed in Safari 16, tvOS 16, watchOS 9, iOS 16. Visiting a website that frames malicious content may lead to UI spoofing.

Affected products

• Apple iPhone OS: before 16.0 (fixed in 16.0)
• Apple Safari: before 16.0 (fixed in 16.0)
• Apple tvOS: before 16.0 (fixed in 16.0)
• Apple watchOS: before 9.0 (fixed in 9.0)

Published 2023-02-27. Last modified 2026-06-17.