VULNERABILITY INTELLIGENCE

CVE-2023-42852

CVSS score8.8 HIGH

EPSS probability1.98%

CISA KEVNot currently listed

Published2023-10-25

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution.

Weakness classification

nvd@nist.gov: NVD-CWE-noinfo

Primary references

product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Mailing List
product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Mailing List, Third Party Advisory
product-security@apple.com — Mailing List
product-security@apple.com — Third Party Advisory
product-security@apple.com — Release Notes, Vendor Advisory