CVE-2023-40451 — Apple Safari vulnerability

7 documents7 sources
Severity
8.8HIGHNVD
EPSS
0.3%
top 49.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple Safari
Timeline
PublishedSep 27
Latest updateSep 28

Description

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 17. An attacker with JavaScript execution may be able to execute arbitrary code.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5apple/safariunspecified — 17
▶NVDapple/safari< 17.0

🔴Vulnerability Details

3
GHSA
GHSA-p489-ffhp-rw3f: This issue was addressed with improved iframe sandbox enforcement↗2023-09-27
▶
OSV
CVE-2023-40451: This issue was addressed with improved iframe sandbox enforcement↗2023-09-27
▶
CVEList
CVE-2023-40451: This issue was addressed with improved iframe sandbox enforcement↗2023-09-26
▶

📋Vendor Advisories

3
Red Hat
webkitgtk: attacker with JavaScript execution may be able to execute arbitrary code↗2023-09-28
▶
Apple
CVE-2023-40451: Safari 17↗2023-09-26
▶
Debian
CVE-2023-40451: webkit2gtk - This issue was addressed with improved iframe sandbox enforcement. This issue is...↗2023
▶
CVE-2023-40451 — Apple Safari vulnerability | cvebase