VULNERABILITY INTELLIGENCE

CVE-2023-35074

CVSS score8.8 HIGH

EPSS probability1.58%

CISA KEVNot currently listed

Published2023-09-27

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.

Primary references

product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Mailing List
product-security@apple.com — Mailing List
product-security@apple.com
product-security@apple.com — Release Notes, Vendor Advisory
product-security@apple.com — Release Notes, Vendor Advisory
product-security@apple.com — Release Notes, Vendor Advisory
product-security@apple.com — Release Notes, Vendor Advisory