VULNERABILITY INTELLIGENCE

CVE-2023-40451

CVSS score8.8 HIGH
EPSS probability1.08%
CISA KEVNot currently listed
Published2023-09-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 17. An attacker with JavaScript execution may be able to execute arbitrary code.

Primary references