Medium WID-SEC-2023-0770 3 CVEs

Apple Safari: Mehrere Schwachstellen

Published Mar 27, 2023 · Updated May 8, 2023 · Revision 2 · de-DE

Vendor: Apple Product: Safari < 16.4 Platform: iOS Platform: macOS

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple Safari ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder Code auszuführen.

Product

Safari ist der auf Apple Geräten eingesetzte Web Browser.

Vulnerabilities 3

Critical 9.8

CVE-2023-28201

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16…

Apple macOS iOS and iPadOS tvOS macOS iOS Browsers

May 8, 2023
Medium 6.5

CVE-2023-27954

The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 8, 2023
Medium 5.5

CVE-2023-27932

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 8, 2023

Revision history

2023-05-08 #2
CVE's ergänzt
2023-03-27 #1
Initiale Fassung

References

Apple Security Advisory vom 2023-03-27
https://support.apple.com/en-us/HT213671