CVE-2023-43000

EUVD-2023-47421
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6. Processing maliciously crafted web content may lead to memory corruption.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA-ADPADP
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 16%
Affected Products (NVD)
VendorProductVersion
applesafari
𝑥
< 16.6
appleipados
𝑥
< 16.6
appleiphone_os
𝑥
< 16.6
applemacos
𝑥
< 13.5
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
webkitgtk
bionic
ignored
jammy
dne
noble
dne
plucky
dne
questing
dne
xenial
ignored
webkit2gtk
bionic
ignored
focal
ignored
jammy
Fixed 2.42.1-0ubuntu0.22.04.1
released
noble
not-affected
plucky
not-affected
questing
not-affected
xenial
ignored
qtwebkit-source
bionic
ignored
jammy
dne
noble
dne
plucky
dne
questing
dne
xenial
ignored
qtwebkit-opensource-src
bionic
ignored
focal
ignored
jammy
ignored
noble
ignored
plucky
dne
questing
dne
xenial
ignored
wpewebkit
focal
ignored
jammy
ignored
noble
dne
plucky
dne
questing
dne
Common Weakness Enumeration
References
https://support.apple.com/en-us/120324
https://support.apple.com/en-us/120331
https://support.apple.com/en-us/120338