Aller au contenu
en Se connecter
8.8 Élevée Exploitée

CVE-2023-42917 Apple Multiple Products WebKit Memory Corruption Vulnerability

Exploitation active constatée

· catalogue CISA KEV
Action attendue Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Campagnes de rançongiciel Non constatée à ce jour
Faiblesse CWE-787

Description

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

Produits et versions touchés

Produit Versions touchées Corrigé en
Safari 17.1 premières → < 17.1 17.1
macOS 14.1 premières → < 14.1 14.1
iOS and iPadOS 17.1 premières → < 17.1 17.1

Références

Chronologie

  1. Publiée
  2. Ajoutée au catalogue KEV
  3. Dernière modification

Autres CVE de Safari

Les 520 CVE de Safari →
CVE-2026-113904 A use-after-free issue was addressed with improved memory management 4.3 Moyenne CVE-2026-113949 A type confusion issue was addressed with improved state management 8.8 Élevée CVE-2026-112621 An out-of-bounds write issue was addressed with improved bounds checking 7.5 Élevée CVE-2026-112699 An out-of-bounds read was addressed with improved bounds checking 6.5 Moyenne
Suivre cette CVE