CVEvulnerability
CVE-2023-23517
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-02-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-119
Description
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected configurations
• apple safari (< 16.3)
• apple ipados (< 16.3)
• apple iphone os (< 16.3)
• apple macos (< 11.7.3)
• apple macos (>= 12.0 < 12.6.3)
• apple macos (>= 13.0 < 13.2)
• apple tvos (< 16.3)
• apple watchos (< 9.3)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- https://support.apple.com/en-us/HT213599 Vendor Advisory
- https://support.apple.com/en-us/HT213600 Vendor Advisory
- https://support.apple.com/en-us/HT213601 Vendor Advisory
- https://support.apple.com/en-us/HT213603 Vendor Advisory
- https://support.apple.com/en-us/HT213604 Vendor Advisory
- https://support.apple.com/en-us/HT213605 Vendor Advisory
- https://support.apple.com/en-us/HT213606 Vendor Advisory
- https://support.apple.com/en-us/HT213638 support.apple.com
- https://support.apple.com/en-us/HT213599 Vendor Advisory
- https://support.apple.com/en-us/HT213600 Vendor Advisory
- https://support.apple.com/en-us/HT213601 Vendor Advisory
- https://support.apple.com/en-us/HT213603 Vendor Advisory
- https://support.apple.com/en-us/HT213604 Vendor Advisory
- https://support.apple.com/en-us/HT213605 Vendor Advisory
- https://support.apple.com/en-us/HT213606 Vendor Advisory
- https://support.apple.com/en-us/HT213638 support.apple.com