Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-42950
HistoryMar 28, 2024 - 4:15 p.m.

CVE-2023-42950

2024-03-2816:15:08
[email protected]
web.nvd.nist.gov
1
memory management
safari
ios
ipados
tvos
watchos
macos sonoma
arbitrary code execution
malicious web content

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.8%

JSON

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.

Affected configurations

NVD
Node
applesafariRange<17.2
OR
appleipadosRange<17.2
OR
appleiphone_osRange<17.2
OR
applemacosRange14.0–14.2
OR
appletvosRange<17.2
OR
applewatchosRange<10.2

Related

osv 3
cvelist 1
ubuntucve 1
cve 1
redhatcve 1
debiancve 1
amazon 1
nessus 12
apple 5
openvas 10
fedora 1
debian 1
ubuntu 1
mageia 1
osv
osv
CVE-2023-42950
2024-03-28 16:15:08
webkit2gtk vulnerabilities
2024-04-15 16:29:45
webkit2gtk - security update
2024-05-09 00:00:00
cvelist
cvelist
CVE-2023-42950
2024-03-28 15:39:16
ubuntucve
ubuntucve
CVE-2023-42950
2024-03-28 00:00:00
cve
cve
CVE-2023-42950
2024-03-28 16:15:08
redhatcve
redhatcve
CVE-2023-42950
2024-03-27 03:51:06
debiancve
debiancve
CVE-2023-42950
2024-03-28 16:15:08
amazon
amazon
Important: webkitgtk4
2024-02-01 19:57:00
nessus
nessus
Amazon Linux 2 : webkitgtk4 (ALAS-2024-2434)
2024-02-06 00:00:00
SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2024:1293-1)
2024-04-16 00:00:00
RHEL 8 : webkitgtk (Unpatched Vulnerability)
2024-06-03 00:00:00
apple
apple
About the security content of Safari 17.2
2023-12-11 00:00:00
About the security content of tvOS 17.2
2023-12-11 00:00:00
About the security content of watchOS 10.2
2023-12-11 00:00:00
openvas
openvas
Apple Safari Security Update (HT214039)
2023-12-14 00:00:00
Ubuntu: Security Advisory (USN-6732-1)
2024-04-16 00:00:00
Fedora: Security Advisory for webkit2gtk4.0 (FEDORA-2024-a1246372a4)
2024-05-27 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: webkit2gtk4.0-2.44.1-1.fc40
2024-05-07 05:21:22
debian
debian
[SECURITY] [DSA 5684-1] webkit2gtk security update
2024-05-09 07:57:13
ubuntu
ubuntu
WebKitGTK vulnerabilities
2024-04-15 00:00:00
mageia
mageia
Updated webkit2 packages fix security vulnerabilities
2024-04-26 09:47:12

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.8%

JSON
Related for NVD:CVE-2023-42950
osv3cvelist1ubuntucve1cve1redhatcve1debiancve1amazon1nessus12apple5openvas10fedora1debian1ubuntu1mageia1