CVE-2023-37450 — Apple Multiple Products WebKit Code Execution Vulnerability

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2023-07-13 00:00 UTC
  • Importiert: 2026-10-21 18:47 UTC
  • CVSS: 8.8
  • Quelle-ID: cisa_kev
  • uid_hash: 0722f2d7d6243d24f6c71d004ab9803a8e7f8c6180c802a2b6f758d49e8d3146

Inhalt

Vendor / Project: Apple Product: Multiple Products Description: Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. Required Action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable. Due Date: 2023-08-03 Ransomware Campaign Use: Unknown Notes: https://support.apple.com/en-us/HT213826, https://support.apple.com/en-us/HT213841, https://support.apple.com/en-us/HT213843, https://support.apple.com/en-us/HT213846, https://support.apple.com/en-us/HT213848; https://nvd.nist.gov/vuln/detail/CVE-2023-37450

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2023-37450

HIGH

8.8

HIGH

8.8

2023-07-26

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
CISA – Known Exploited Vulnerabilities (KEV)

cisa_kev

threat_intel cisa, kev - de https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json