CVE-2023-28198

· HIGHModified

← All CVEs

CVSS v3.1

8.8

EPSS

0.93%

Published

Aug 14, 2023

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead to arbitrary code execution.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-416

Affected Products (5)

apple · ipados (up to 16.4)vulnerable

apple · iphone_os (up to 16.4)vulnerable

apple · macos (up to 13.3)vulnerable

webkitgtk · webkitgtk (up to 2.40.1)vulnerable

wpewebkit · wpe_webkit (up to 2.40.1)vulnerable

References (8)

http://www.openwall.com/lists/oss-security/2023/09/11/1

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/202401-04

https://support.apple.com/en-us/HT213670

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213676

Release NotesVendor Advisory

http://www.openwall.com/lists/oss-security/2023/09/11/1

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/202401-04

https://support.apple.com/en-us/HT213670

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213676

Release NotesVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs