VULNERABILITY INTELLIGENCE

CVE-2023-41993

CVSS score8.8 HIGH

EPSS probability24.35%

CISA KEVKnown exploited vulnerability

Published2023-09-21

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Apple Multiple Products WebKit Code Execution Vulnerability

Vendor / product: Apple / Multiple Products

Description

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

Weakness classification

nvd@nist.gov: CWE-754
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-754

Primary references

product-security@apple.com — Third Party Advisory
product-security@apple.com — Third Party Advisory
product-security@apple.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource