High 1 exploited CVE WID-SEC-2023-2452 5 CVEs

Apple Safari: Mehre Schwachstellen

Published Sep 26, 2023 · Updated Sep 26, 2023 · de-DE

Vendor: Apple Product: Safari < 17 Platform: iOS Platform: macOS

Summary

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Apple Safari ausnutzen, um beliebigen Code auszuführen oder UI-Spoofing zu betreiben.

Product

Safari ist der auf Apple Geräten eingesetzte Web Browser.

Vulnerabilities 5

High 8.8

CVE-2023-41993 Exploited Public exploit EPSS 24%

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead t…

Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu Wolfi

Sep 21, 2023
KEV Sep 25, 2023
High 8.8

CVE-2023-35074

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 an…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Sep 26, 2023
High 8.8

CVE-2023-41074

The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu Wolfi

Sep 26, 2023
Unscored —

CVE-2023-40417

A window management issue was addressed with improved state management. This issue is fixed in Safari 17, iOS 17 and iP…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Sep 26, 2023
Unscored —

CVE-2023-40451

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 17. An attacker with J…

Apple Safari qtwebkit-source qtwebkit-opensource-src Browsers Debian Ubuntu

Sep 26, 2023

Revision history

2023-09-26 #1
Initiale Fassung

References

Apple Security Update vom 2023-09-26
https://support.apple.com/en-us/HT213941