CVE-2023-42917

HIGHCISA KEV

Apple Multiple Products WebKit Memory Corruption Vulnerability

Title source: CISA
STIX 2.1 vulnerability

Record summary

CVE-2023-42917 has a selected CVSS score of 8.8 (high). CISA lists CVE-2023-42917 in KEV.

Description

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

Description source: CVE List

Exploitation context

Known exploitation

CISA KEV
Listed · Dec 4, 2023 · CISA
VulnCheck KEV
Listed · Nov 30, 2023 · VulnCheck
Reported exploitation
Observed · VulnCheck

CISA SSVC decision

ExploitationActive
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Dec 2, 2023 · Source: CVE List

Affected products and versions

4
ProductSourceVersion range

Multiple Products

Browse Apple / Multiple Products
CISAVersion data not supplied

Safari

Browse Apple / Safari
CVE ListBefore 17.1affected

iOS and iPadOS

Browse Apple / iOS and iPadOS
CVE ListBefore 17.1affected

macOS

Browse Apple / macOS
CVE ListBefore 14.1affected

References

Showing 12 of 20