CVE-2023-32409

Warnung

EPSS 0.25%
Veröffentlicht 23.06.2023 18:15:13
Zuletzt bearbeitet 23.10.2025 18:48:09
Quelle product-security@apple.com
CVE-Watchlists
Login
Unerledigt
Login

The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.8 and iPadOS 15.7.8, Safari 16.5, iOS 16.5 and iPadOS 16.5. A remote attacker may be able to break out of Web Content sandbox. Apple is aware of a report that this issue may have been actively exploited.

Betroffene Produkte Warnungen 1 Metriken 2 CWE 0 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Safari Version < 16.5

Apple ≫ iPadOS Version >= 15.0 < 15.7.8

Apple ≫ iPadOS Version >= 16.0 < 16.5

Apple ≫ iPhone OS Version >= 15.0 < 15.7.8

Apple ≫ iPhone OS Version >= 16.0 < 16.5

Apple ≫ macOS Version >= 13.0 < 13.4

Apple ≫ tvOS Version < 16.5

Apple ≫ watchOS Version < 9.5

22.05.2023: CISA Known Exploited Vulnerabilities (KEV) Catalog

Apple Multiple Products WebKit Sandbox Escape Vulnerability

Schwachstelle

Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an unspecified vulnerability that can allow a remote attacker to break out of the Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen