Vulnerability Details : CVE-2023-23518
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution.
Exploit prediction scoring system (EPSS) score for CVE-2023-23518
Probability of exploitation activity in the next 30 days: 0.44%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 74 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2023-23518
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
8.8
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
NIST |
References for CVE-2023-23518
-
https://security.gentoo.org/glsa/202305-32
WebKitGTK+: Multiple Vulnerabilities (GLSA 202305-32) — Gentoo security
-
https://support.apple.com/en-us/HT213603
About the security content of macOS Big Sur 11.7.3 - Apple SupportVendor Advisory
-
https://support.apple.com/en-us/HT213605
About the security content of macOS Ventura 13.2 - Apple SupportVendor Advisory
-
https://support.apple.com/en-us/HT213638
About the security content of Safari 16.3 - Apple Support
-
https://support.apple.com/en-us/HT213600
About the security content of Safari 16.3 - Apple SupportVendor Advisory
-
https://support.apple.com/en-us/HT213604
About the security content of macOS Monterey 12.6.3 - Apple SupportVendor Advisory
-
https://support.apple.com/en-us/HT213601
About the security content of tvOS 16.3 - Apple SupportVendor Advisory
-
https://support.apple.com/en-us/HT213599
About the security content of watchOS 9.3 - Apple SupportVendor Advisory
-
https://support.apple.com/en-us/HT213606
About the security content of iOS 16.3 and iPadOS 16.3 - Apple SupportVendor Advisory
Products affected by CVE-2023-23518
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*