Description
The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5, Safari 16.6. Processing web content may lead to arbitrary code execution.
References (9)
Core 9
Core References
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213841
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213842
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213843
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213847
Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/
Mailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/
Third Party Advisory
https://www.debian.org/security/2023/dsa-5468
Third Party Advisory
https://security.gentoo.org/glsa/202401-04
Scores
CVSS v3
8.8
EPSS
0.0037
EPSS Percentile
58.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
Status
published
Products (4)
apple/ipados
< 15.7.8
apple/iphone_os
< 15.7.8
apple/macos
13.0 - 13.5
apple/safari
< 16.6
Published
Jul 27, 2023
Tracked Since
Feb 18, 2026