CVE-2023-42970

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, Safari 17. Processing web content may lead to arbitrary code execution.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
appleCNA
---
---
CISA-ADPADP
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 19%
VendorProductVersion
applesafari
𝑥
< 17.0
appleipados
𝑥
< 17.0
appleiphone_os
𝑥
< 17.0
applemacos
𝑥
< 14.0
appletvos
𝑥
< 17.0
applewatchos
𝑥
< 10.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://support.apple.com/en-us/120330
https://support.apple.com/en-us/120947
https://support.apple.com/en-us/120948
https://support.apple.com/en-us/120949
https://support.apple.com/en-us/120950