AppleVULNRICHMENT:CVE-2023-42890CVE-2023-42890
AI Score
Confidence
Low
EPSS
Percentile
68.8%
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, watchOS 10.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2. Processing web content may lead to arbitrary code execution.
References
seclists.org/fulldisclosure/2023/Dec/12
seclists.org/fulldisclosure/2023/Dec/13
seclists.org/fulldisclosure/2023/Dec/6
seclists.org/fulldisclosure/2023/Dec/7
seclists.org/fulldisclosure/2023/Dec/9
www.openwall.com/lists/oss-security/2023/12/18/1
security.gentoo.org/glsa/202401-33
support.apple.com/en-us/HT214035
support.apple.com/en-us/HT214036
support.apple.com/en-us/HT214039
support.apple.com/en-us/HT214040
support.apple.com/en-us/HT214041
support.apple.com/kb/HT214039
Related
AI Score
Confidence
Low
EPSS
Percentile
68.8%
SSVC
Exploitation
none
Automatable
no
Technical Impact
total