CVE-2023-41993
HIGH8.8⚠ KEVEPSS 24.2%Apple Multiple Products WebKit Code Execution Vulnerability
Published: 9/21/2023Modified: 5/8/2026Added to CISA KEV: 9/25/2023
Description
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.
Affected packages (5)
- Bitnami/javafrom 0, < 1.8.0, >= 1.9.0, < 8.0.411
- Bitnami/java-minfrom 0, < 1.8.0, >= 1.9.0, < 8.0.411
- Bitnami/jrefrom 0, < 1.8.0, >= 1.9.0, < 8.0.411
- Debian/webkit2gtkfrom 0, < 2.42.1-1~deb11u1
- Debian/wpewebkitfrom 0
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH8.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
References (10)
- ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2023-41993
- WEBhttps://nvd.nist.gov/vuln/detail/CVE-2023-41993
- WEBhttps://openjdk.org/groups/vulnerability/advisories/2024-04-16
- WEBhttps://security.gentoo.org/glsa/202401-33
- WEBhttps://security.netapp.com/advisory/ntap-20240426-0004/
- WEBhttps://support.apple.com/en-us/HT213940
- WEBhttps://support.apple.com/kb/HT213926
- WEBhttps://support.apple.com/kb/HT213930
- WEBhttps://webkitgtk.org/security/WSA-2023-0009.html
- WEBhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41993