CVE-2023-32435
גבוהה 8.8 מנוצלת בשטח (KEV)
ניצול פעיל מאומת — קטלוג CISA KEV
- שם
- Apple Multiple Products WebKit Memory Corruption Vulnerability
- נוסף לקטלוג
- יעד טיפול (פדרלי)
- פעולה נדרשת
- Apply updates per vendor instructions.
תיאור (מקור, אנגלית)
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.
מדדים
- CVSS 3.1
-
8.8 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 23% (אחוזון 100) נכון ל-26/7/2026
- CWE
- CWE-787
מוצרים מושפעים
apple: safari; apple: ipados; apple: iphone os; apple: macos
קישורים
- https://support.apple.com/en-us/HT213670 Vendor Advisory
- https://support.apple.com/en-us/HT213671 Vendor Advisory
- https://support.apple.com/en-us/HT213676 Vendor Advisory
- https://support.apple.com/en-us/HT213811 Vendor Advisory
- https://support.apple.com/en-us/HT213670 Vendor Advisory
- https://support.apple.com/en-us/HT213671 Vendor Advisory
- https://support.apple.com/en-us/HT213676 Vendor Advisory
- https://support.apple.com/en-us/HT213811 Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-202… US Government Resource