cbcvebase.
CVE-2023-23518
published 2023-02-27

CVE-2023-23518: The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3…

high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Affected

24 ranges
VendorProductVersion rangeFixed in
appleios_16.3_and_ipados
appleios_and_ipados>= unspecified < 16.316.3
appleipados< 16.316.3
appleiphone_os< 16.316.3
applemacos< 11.7.311.7.3
applemacos>= 12.0 < 12.6.312.6.3
applemacos>= 13.0 < 13.213.2
applemacos>= unspecified < 11.711.7
applemacos>= unspecified < 13.213.2
applemacos>= unspecified < 12.612.6
applemacos_big_sur
applemacos_monterey
applemacos_ventura
applesafari< 16.316.3
applesafari
applesafari>= unspecified < 16.316.3
appletvos< 16.316.3
appletvos
appletvos>= unspecified < 16.316.3
applewatchos< 9.39.3
applewatchos
applewatchos>= unspecified < 9.39.3
debianwebkit2gtk< webkit2gtk 2.38.4-1 (bookworm)webkit2gtk 2.38.4-1 (bookworm)
debianwpewebkit< webkit2gtk 2.38.4-1 (bookworm)webkit2gtk 2.38.4-1 (bookworm)

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv8.8HIGH