High WID-SEC-2023-2744 4 CVEs

Apple Safari: Mehrere Schwachstellen

Published Oct 25, 2023 · Updated Oct 25, 2023 · de-DE

Vendor: Apple Product: Safari < 17.1 Platform: macOS

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple Safari ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.

Product

Safari ist der auf Apple Geräten eingesetzte Web Browser.

Vulnerabilities 4

High 8.8

CVE-2023-42852

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Oct 25, 2023
Unscored —

CVE-2023-40447

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, i…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Oct 25, 2023
Unscored —

CVE-2023-41976

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17.1 and iPadOS 17.1, …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers

Oct 25, 2023
Unscored —

CVE-2023-41983

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, Safari 17.1, iOS 16.7.…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Oct 25, 2023

Revision history

2023-10-25 #1
Initiale Fassung

References

Apple Security Update vom 2023-10-25
https://support.apple.com/en-us/HT213986