---
title: "Security digest: July 20, 2022"
url: https://erroneo.us/security/2022-07-20/
description: "July 20, 2022 vulnerability digest: 1 brief (Apple JavaScriptCore CVE-2022-48503: 2022 Bug…). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2022-07-20
date_modified: 2026-10-23
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: July 20, 2022

1 editorial brief.

## Take stock

- Check exposure: Apple JavaScriptCore CVE-2022-48503: 2022 Bug Now in KEV . Anyone with iPhones or iPads below iOS/iPadOS 15.6, Macs below Monterey 12.5 or Safari 15.6, Apple TVs below tvOS 15.6, Apple Watches below watchOS 8.7, or Linux apps on WebKitGTK or WPE WebKit below 2.38.0.
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Check exposure** [Apple JavaScriptCore CVE-2022-48503: 2022 Bug Now in KEV](https://erroneo.us/security/briefs/apple-javascriptcore-cve-2022-48503-kev/index.md): Fixed since July 2022 and irrelevant to any device updated since then, but an iPhone or iPad still on iOS 15.5 or earlier can be compromised by visiting a web page, and the exploit has circulated in a criminal kit.

## Known exploited (CISA KEV)

None.

## Critical advisories

None.

---
Source page: https://erroneo.us/security/2022-07-20/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt