CVEvulnerability
CVE-2023-32445
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-07-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-79
Description
This issue was addressed with improved checks. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. Processing a document may lead to a cross site scripting attack.
Affected configurations
• apple safari (< 16.6)
• apple ipados (< 15.7.8)
• apple ipados (>= 16.0 < 16.6)
• apple iphone os (< 15.7.8)
• apple iphone os (>= 16.0 < 16.6)
• apple macos (>= 13.0 < 13.5)
• apple tvos (< 16.6)
• apple watchos (< 9.6)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://support.apple.com/en-us/HT213841 Vendor Advisory
- https://support.apple.com/en-us/HT213842 Vendor Advisory
- https://support.apple.com/en-us/HT213843 Vendor Advisory
- https://support.apple.com/en-us/HT213846 Vendor Advisory
- https://support.apple.com/en-us/HT213847 Vendor Advisory
- https://support.apple.com/en-us/HT213848 Vendor Advisory
- https://support.apple.com/en-us/HT213841 Vendor Advisory
- https://support.apple.com/en-us/HT213842 Vendor Advisory
- https://support.apple.com/en-us/HT213843 Vendor Advisory
- https://support.apple.com/en-us/HT213846 Vendor Advisory
- https://support.apple.com/en-us/HT213847 Vendor Advisory
- https://support.apple.com/en-us/HT213848 Vendor Advisory