Aller au contenu
en Se connecter
6.5 Moyenne Exploitée

CVE-2023-42916 Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

Exploitation active constatée

· catalogue CISA KEV
Action attendue Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Campagnes de rançongiciel Non constatée à ce jour
Faiblesse CWE-125

Description

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

Produits et versions touchés

Produit Versions touchées Corrigé en
Safari 17.1 premières → < 17.1 17.1
macOS 14.1 premières → < 14.1 14.1
iOS and iPadOS 17.1 premières → < 17.1 17.1
iphone_os 17.1 premières → < 17.1.2 17.1.2
iPadOS 17.1 premières → < 17.1.2 17.1.2

Références

Chronologie

  1. Publiée
  2. Ajoutée au catalogue KEV
  3. Dernière modification

Autres CVE de Safari

Les 520 CVE de Safari →
CVE-2026-113904 A use-after-free issue was addressed with improved memory management 4.3 Moyenne CVE-2026-113949 A type confusion issue was addressed with improved state management 8.8 Élevée CVE-2026-112621 An out-of-bounds write issue was addressed with improved bounds checking 7.5 Élevée CVE-2026-112699 An out-of-bounds read was addressed with improved bounds checking 6.5 Moyenne
Suivre cette CVE