Lucene search
HistorySep 27, 2023 - 3:19 p.m.
CVE-2023-40451
safari
iframe sandbox
cve-2023-40451
arbitrary code
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
38.0%
This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 17. An attacker with JavaScript execution may be able to execute arbitrary code.
Affected configurations
Node
applesafariRange<17.0
Related
debiancve
debiancve
CVE-2023-40451
2023-09-27 15:19:17
redhatcve
redhatcve
CVE-2023-40451
2023-09-29 18:26:05
cvelist
cvelist
CVE-2023-40451
2023-09-26 20:14:38
osv
osv
CVE-2023-40451
2023-09-27 15:19:17
webkit2gtk - security update
2023-08-05 00:00:00
Important: webkit2gtk3 security and bug fix update
2023-11-14 00:00:00
prion
prion
Code injection
2023-09-27 15:19:00
ubuntucve
ubuntucve
CVE-2023-40451
2023-09-27 00:00:00
cve
cve
CVE-2023-40451
2023-09-27 15:19:17
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:4978-1)
2023-12-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:0002-1)
2024-01-03 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:0003-1)
2024-01-03 00:00:00
nessus
nessus
apple
apple
About the security content of Safari 17
2023-09-26 00:00:00
gentoo
gentoo
WebKitGTK+: Multiple Vulnerabilities
2024-01-31 00:00:00
almalinux
almalinux
Important: webkit2gtk3 security and bug fix update
2023-11-07 00:00:00
Important: webkit2gtk3 security and bug fix update
2023-11-14 00:00:00
amazon
amazon
Important: webkitgtk4
2024-01-19 01:51:00
oraclelinux
oraclelinux
webkit2gtk3 security and bug fix update
2023-11-17 00:00:00
webkit2gtk3 security and bug fix update
2023-11-11 00:00:00
redhat
redhat
(RHSA-2023:7055) Important: webkit2gtk3 security and bug fix update
2023-11-14 08:44:13
(RHSA-2023:6535) Important: webkit2gtk3 security and bug fix update
2023-11-07 06:07:56
mageia
mageia
Updated webkit2 packages fix security vulnerabilities
2024-04-26 09:47:12
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
38.0%
Related for NVD:CVE-2023-40451