CVE-2023-23529
גבוהה 8.8 מנוצלת בשטח (KEV)
ניצול פעיל מאומת — קטלוג CISA KEV
- שם
- Apple Multiple Products WebKit Type Confusion Vulnerability
- נוסף לקטלוג
- יעד טיפול (פדרלי)
- פעולה נדרשת
- Apply updates per vendor instructions.
תיאור (מקור, אנגלית)
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, Safari 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
מדדים
- CVSS 3.1
-
8.8 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 10% (אחוזון 100) נכון ל-25/7/2026
- CWE
- CWE-843
מוצרים מושפעים
apple: safari; apple: ipados; apple: iphone os; apple: macos
קישורים
- https://support.apple.com/en-us/HT213633 Release NotesVendor Advisory
- https://support.apple.com/en-us/HT213635 Release NotesVendor Advisory
- https://support.apple.com/en-us/HT213638 Release NotesVendor Advisory
- https://support.apple.com/en-us/HT213673 Release NotesVendor Advisory
- https://support.apple.com/en-us/HT213633 Release NotesVendor Advisory
- https://support.apple.com/en-us/HT213635 Release NotesVendor Advisory
- https://support.apple.com/en-us/HT213638 Release NotesVendor Advisory
- https://support.apple.com/en-us/HT213673 Release NotesVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-202… US Government Resource