← CVE Radar
CVE-2023-41993Apple Multiple Products WebKit Code Execution Vulnerability
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.
8.8 HIGHEPSS 23.70%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.8 | HIGH | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
CISA required action
⚡ Known exploited · remediation due Oct 16, 2023
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Details
- CVE ID
- CVE-2023-41993
- Status
- Analyzed
- Assigner (CNA)
- apple
- Published
- Sep 21, 2023
- Last modified
- 2026-06-17 06:23 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
ApplemacOS1 version range
- before 14
References
- security.gentoo.org https://security.gentoo.org/glsa/202401-33
- security.netapp.com https://security.netapp.com/advisory/ntap-20240426-0004/
- support.apple.com https://support.apple.com/en-us/HT213940
- support.apple.com https://support.apple.com/kb/HT213926
- support.apple.com https://support.apple.com/kb/HT213930
- webkitgtk.org https://webkitgtk.org/security/WSA-2023-0009.html
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41993