CVEvulnerability
CVE-2023-42833
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-01-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-94
Description
A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14, Safari 17, iOS 17 and iPadOS 17. Processing web content may lead to arbitrary code execution.
Affected configurations
• apple safari (< 17.0)
• apple ipados (< 17.0)
• apple iphone os (< 17.0)
• apple macos (< 14.0)
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://www.openwall.com/lists/oss-security/2024/02/05/8 www.openwall.com
- https://support.apple.com/en-us/HT213938 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213940 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213941 Release Notes, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2024/02/05/8 www.openwall.com
- https://support.apple.com/en-us/HT213938 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213940 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213941 Release Notes, Vendor Advisory