5.3
CVSSv3

CVE-2023-32370

Published: 06/09/2023 Updated: 05/01/2024
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3. Content Security Policy to block domains with wildcards may fail.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

apple macos

wpewebkit wpe webkit

webkitgtk webkitgtk

Vendor Advisories

Synopsis Important: webkit2gtk3 security and bug fix update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated this ...
Synopsis Important: webkit2gtk3 security and bug fix update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this ...
A use-after-free issue was addressed with improved memory management This issue is fixed in iOS 164 and iPadOS 164, macOS Ventura 133 Processing web content may lead to arbitrary code execution (CVE-2023-28198) A logic issue was addressed with improved validation This issue is fixed in macOS Ventura 133 Content Security Policy to block dom ...
DescriptionThe MITRE CVE dictionary describes this issue as: A logic issue was addressed with improved validation This issue is fixed in macOS Ventura 133 Content Security Policy to block domains with wildcards may fail ...