Memory Handling Flaw in Apple's Operating Systems and Safari
CVE-2023-23518

8.8HIGH

Key Information:

Vendor
Apple
Status
iOS and iPadOS
tvOS
Safari
macOS
Vendor
CVE Published:
27 February 2023

Summary

A vulnerability in Apple’s operating systems and Safari could allow attackers to exploit faulty memory handling. When users process maliciously crafted web content, it may lead to arbitrary code execution. The issue has been addressed in multiple product updates, enhancing overall security and mitigating potential risks for users.

Affected Version(s)

iOS and iPadOS < 16.3

macOS < 11.7

macOS < 13.2

References

https://support.apple.com/en-us/HT213606
https://support.apple.com/en-us/HT213601
https://support.apple.com/en-us/HT213600

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.