VULNERABILITY INTELLIGENCE

CVE-2023-42843

CVSS score4.3 MEDIUM

EPSS probability0.97%

CISA KEVNot currently listed

Published2024-02-21

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Description

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, Safari 17.1, macOS Sonoma 14.1. Visiting a malicious website may lead to address bar spoofing.

Weakness classification

nvd@nist.gov: CWE-290
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-290

Primary references

product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Mailing List
product-security@apple.com — Vendor Advisory
product-security@apple.com — Vendor Advisory
product-security@apple.com — Vendor Advisory
product-security@apple.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory