8.8
CVE-2023-41074
- EPSS 3.61%
- Veröffentlicht 27.09.2023 15:19:26
- Zuletzt bearbeitet 21.11.2024 08:20:30
- Quelle product-security@apple.com
- CVE-Watchlists
- Unerledigt
The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.61% | 0.88 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
https://security.gentoo.org/glsa/202401-33
https://support.apple.com/en-us/HT213940
https://webkitgtk.org/security/WSA-2023-0009.html
http://seclists.org/fulldisclosure/2023/Oct/3
http://seclists.org/fulldisclosure/2023/Oct/10
http://seclists.org/fulldisclosure/2023/Oct/8
http://seclists.org/fulldisclosure/2023/Oct/9
https://support.apple.com/en-us/HT213936
https://support.apple.com/en-us/HT213937
https://support.apple.com/en-us/HT213938
http://seclists.org/fulldisclosure/2023/Oct/2
http://www.openwall.com/lists/oss-security/2023/09/28/3
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EEMDC5TQAANFH5D77QM34ZTUKXPFGVL/
https://support.apple.com/en-us/HT213941
https://www.debian.org/security/2023/dsa-5527