CVE-2023-43000

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6. Processing maliciously crafted web content may lead to memory corruption.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
appleCNA
---
---
CISA-ADPADP
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 14%
VendorProductVersion
applesafari
𝑥
< 16.6
appleipados
𝑥
< 16.6
appleiphone_os
𝑥
< 16.6
applemacos
𝑥
< 13.5
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
webkitgtk
questing
dne
plucky
dne
noble
dne
jammy
dne
bionic
ignored
xenial
ignored
webkit2gtk
questing
not-affected
plucky
not-affected
noble
not-affected
jammy
Fixed 2.42.1-0ubuntu0.22.04.1
released
focal
ignored
bionic
ignored
xenial
ignored
qtwebkit-source
questing
dne
plucky
dne
noble
dne
jammy
dne
bionic
ignored
xenial
ignored
qtwebkit-opensource-src
questing
dne
plucky
dne
noble
ignored
jammy
ignored
focal
ignored
bionic
ignored
xenial
ignored
wpewebkit
questing
dne
plucky
dne
noble
dne
jammy
ignored
focal
ignored
Common Weakness Enumeration
References
https://support.apple.com/en-us/120324
https://support.apple.com/en-us/120331
https://support.apple.com/en-us/120338