CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2023-429166.5/MEDIUMEPSS 17.8%CISA KEV
2023-11-30

Apple WebKit Out-of-Bounds Read Vulnerability (CVE-2023-42916) Critical Security Advisory

[Affected Scope] Apple devices running versions prior to iOS 17.1.2, iPadOS 17.1.2, macOS Sonoma 14.1.2, and Safari 17.1.2

[Impact] Processing maliciously crafted web content may lead to out-of-bounds memory access, disclosing sensitive information and potentially enabling sandbox escape or remote code execution

[Mitigation] Immediately apply the official security updates (iOS/iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2 or later) and enable Lockdown Mode for high-risk users

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse