CVE-2023-32409

Warning

EPSS 0.35%
Published 23.06.2023 18:15:13
Last modified 23.01.2025 16:53:34
Source product-security@apple.com
Teams watchlist Login
Open Login

The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.8 and iPadOS 15.7.8, Safari 16.5, iOS 16.5 and iPadOS 16.5. A remote attacker may be able to break out of Web Content sandbox. Apple is aware of a report that this issue may have been actively exploited.

Affected products Warnungen 1 Metrics 2 CWE 0 References 9

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ Safari Version < 16.5

Apple ≫ iPadOS Version >= 15.0 < 15.7.8

Apple ≫ iPadOS Version >= 16.0 < 16.5

Apple ≫ iPhone OS Version >= 15.0 < 15.7.8

Apple ≫ iPhone OS Version >= 16.0 < 16.5

Apple ≫ macOS Version >= 13.0 < 13.4

Apple ≫ tvOS Version < 16.5

Apple ≫ watchOS Version < 9.5

22.05.2023: CISA Known Exploited Vulnerabilities (KEV) Catalog

Apple Multiple Products WebKit Sandbox Escape Vulnerability

Vulnerability

Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an unspecified vulnerability that can allow a remote attacker to break out of the Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Description

Apply updates per vendor instructions.

Required actions