9.8
CVSSv3

CVE-2023-40397

Published: 06/09/2023 Updated: 05/01/2024
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. A remote attacker may be able to cause arbitrary javascript code execution.

Vulnerable Product Search on Vulmon Subscribe to Product

apple macos

webkitgtk webkitgtk

wpewebkit wpe webkit

Vendor Advisories

Synopsis Important: webkit2gtk3 security and bug fix update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated this ...
Synopsis Important: webkit2gtk3 security and bug fix update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this ...
A use-after-free issue was addressed with improved memory management This issue is fixed in iOS 164 and iPadOS 164, macOS Ventura 133 Processing web content may lead to arbitrary code execution (CVE-2023-28198) A logic issue was addressed with improved validation This issue is fixed in macOS Ventura 133 Content Security Policy to block dom ...
DescriptionThe MITRE CVE dictionary describes this issue as: The issue was addressed with improved checks This issue is fixed in macOS Ventura 135 A remote attacker may be able to cause arbitrary javascript code execution ...