Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cisa_kevCISACISA-KEV-CVE-2023-32435
HistoryJun 23, 2023 - 12:00 a.m.

Apple Multiple Products WebKit Memory Corruption Vulnerability

2023-06-2300:00:00
CISA
www.cisa.gov
38
apple
webkit
memory corruption
vulnerability
code execution
web content
html parsing
safari
macos
ios
ipados

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.002

Percentile

54.2%

JSON

Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Related

cve 1
ubuntucve 1
osv 7
attackerkb 1
nvd 1
prion 1
cvelist 1
redhatcve 2
debiancve 1
talosblog 1
almalinux 2
nessus 18
oraclelinux 2
thn 5
openvas 10
rocky 2
malwarebytes 1
amazon 1
apple 4
mageia 1
redhat 2
securelist 1
schneier 1
ubuntu 1
cve
cve
CVE-2023-32435
2023-06-23 18:15:13
ubuntucve
ubuntucve
CVE-2023-32435
2023-06-23 00:00:00
osv
osv
CVE-2023-32435
2023-06-23 18:15:13
Important: webkit2gtk3 security update
2023-07-18 00:00:00
Important: webkit2gtk3 security update
2023-07-18 00:00:00
attackerkb
attackerkb
CVE-2023-32435
2023-06-23 00:00:00
nvd
nvd
CVE-2023-32435
2023-06-23 18:15:13
prion
prion
Memory corruption
2023-06-23 18:15:00
cvelist
cvelist
CVE-2023-32435
2023-06-23 00:00:00
redhatcve
redhatcve
CVE-2023-32435
2023-06-30 07:17:07
CVE-2023-41993
2023-09-25 05:24:30
debiancve
debiancve
CVE-2023-32435
2023-06-23 18:15:13
talosblog
talosblog
New video provides a behind-the-scenes look at Talos ransomware hunters
2023-06-29 18:00:41
almalinux
almalinux
Important: webkit2gtk3 security update
2023-07-18 00:00:00
Important: webkit2gtk3 security update
2023-07-18 00:00:00
nessus
nessus
AlmaLinux 9 : webkit2gtk3 (ALSA-2023:4201)
2023-07-18 00:00:00
Oracle Linux 8 : webkit2gtk3 (ELSA-2023-4202)
2023-07-20 00:00:00
AlmaLinux 8 : webkit2gtk3 (ALSA-2023:4202)
2023-07-19 00:00:00
oraclelinux
oraclelinux
webkit2gtk3 security update
2023-07-20 00:00:00
webkit2gtk3 security update
2023-07-20 00:00:00
thn
thn
iOS Zero-Day Attacks: Experts Uncover Deeper Insights into Operation Triangulation
2023-10-24 08:37:00
Apple Rolls Out Urgent Patches for Zero-Day Flaws Impacting iPhones, iPads and Macs
2023-07-25 03:36:00
Most Sophisticated iPhone Hack Ever Exploited Apple's Hidden Hardware Feature
2023-12-28 11:19:00
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0229)
2023-07-10 00:00:00
Apple Safari Security Update (HT213671)
2023-03-29 00:00:00
Ubuntu: Security Advisory (USN-6264-1)
2023-08-01 00:00:00
rocky
rocky
webkit2gtk3 security update
2023-08-08 12:35:00
webkit2gtk3 security update
2023-08-08 12:34:07
malwarebytes
malwarebytes
Update now! Apple fixes three actively exploited vulnerabilities
2023-06-22 03:00:00
amazon
amazon
Important: webkitgtk4
2023-07-17 17:40:00
apple
apple
About the security content of iOS 15.7.7 and iPadOS 15.7.7
2023-06-21 00:00:00
About the security content of Safari 16.4
2023-03-27 00:00:00
About the security content of iOS 16.4 and iPadOS 16.4
2023-03-27 00:00:00
mageia
mageia
Updated webkit2 packages fix security vulnerability
2023-07-07 08:54:45
redhat
redhat
(RHSA-2023:4202) Important: webkit2gtk3 security update
2023-07-18 14:24:59
(RHSA-2023:4201) Important: webkit2gtk3 security update
2023-07-18 14:24:50
securelist
securelist
Operation Triangulation: The last (hardware) mystery
2023-12-27 14:00:43
schneier
schneier
New iPhone Exploit Uses Four Zero-Days
2024-01-04 12:11:49
ubuntu
ubuntu
WebKitGTK vulnerabilities
2023-07-31 00:00:00

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.002

Percentile

54.2%

JSON
Related for CISA-KEV-CVE-2023-32435
cve1ubuntucve1osv7attackerkb1nvd1prion1cvelist1redhatcve2debiancve1talosblog1almalinux2nessus18oraclelinux2thn5openvas10rocky2malwarebytes1amazon1apple4mageia1redhat2securelist1schneier1ubuntu1