CVE-2023-41993

2023-09-2119:15:11

Debian Security Bug Tracker

security-tracker.debian.org

macos sonoma

web content processing

code execution

ios 16.7

cve-2023-41993

exploit

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.003

Percentile

70.5%

JSON

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

OSVersionArchitecturePackageVersionFilename
Debian12allwebkit2gtk< 2.42.1-1~deb12u1webkit2gtk_2.42.1-1~deb12u1_all.deb
Debian11allwebkit2gtk< 2.42.1-1~deb11u1webkit2gtk_2.42.1-1~deb11u1_all.deb
Debian999allwebkit2gtk< 2.42.1-1webkit2gtk_2.42.1-1_all.deb
Debian13allwebkit2gtk< 2.42.1-1webkit2gtk_2.42.1-1_all.deb
Debian12allwpewebkit<= 2.38.6-1wpewebkit_2.38.6-1_all.deb
Debian11allwpewebkit<= 2.38.6-1~deb11u1wpewebkit_2.38.6-1~deb11u1_all.deb
Debian999allwpewebkit< 2.42.1-1wpewebkit_2.42.1-1_all.deb
Debian13allwpewebkit< 2.42.1-1wpewebkit_2.42.1-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	webkit2gtk	< 2.42.1-1~deb12u1	webkit2gtk_2.42.1-1~deb12u1_all.deb
Debian	11	all	webkit2gtk	< 2.42.1-1~deb11u1	webkit2gtk_2.42.1-1~deb11u1_all.deb
Debian	999	all	webkit2gtk	< 2.42.1-1	webkit2gtk_2.42.1-1_all.deb
Debian	13	all	webkit2gtk	< 2.42.1-1	webkit2gtk_2.42.1-1_all.deb
Debian	12	all	wpewebkit	<= 2.38.6-1	wpewebkit_2.38.6-1_all.deb
Debian	11	all	wpewebkit	<= 2.38.6-1~deb11u1	wpewebkit_2.38.6-1~deb11u1_all.deb
Debian	999	all	wpewebkit	< 2.42.1-1	wpewebkit_2.42.1-1_all.deb
Debian	13	all	wpewebkit	< 2.42.1-1	wpewebkit_2.42.1-1_all.deb