CVE-2022-46705: 
Apple Safari vulnerability analysis and mitigation

CVE-2022-46705 is a spoofing vulnerability discovered in WebKit that affects multiple Apple operating systems including iOS 16.2, iPadOS 16.2, macOS Ventura 13.1, and Safari 16.2. The vulnerability was discovered by Hyeon Park (@tree_segment) of Team ApplePIE and was disclosed in December 2022. The issue allowed malicious websites to perform address bar spoofing attacks (Apple Support, WebKit Advisory).

The vulnerability stems from a spoofing issue that existed in the handling of URLs in WebKit. The issue was tracked as WebKit Bugzilla: 247287 and was addressed by implementing improved input validation (Apple Support, WebKit Advisory).

When exploited, this vulnerability could allow an attacker to create a malicious website that leads to address bar spoofing, potentially misleading users about the website they are visiting (Apple Support).

Apple addressed this vulnerability by implementing improved input validation in WebKit. Users are advised to update to iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, or Safari 16.2, depending on their device (Apple Support, WebKit Advisory).