Vendor / Project: Apple Product: Multiple Products Description: Apple iOS, iPadOS, macOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. Required Action: Apply updates per vendor instructions. Due Date: 2023-05-01 Ransomware Campaign Use: Unknown CWEs: CWE-416 Notes: https://support.apple.com/en-us/HT213720,https://support.apple.com/en-us/HT213721,https://support.apple.com/en-us/HT213722,https://support.apple.com/en-us/HT213723; https://nvd.nist.gov/vuln/detail/CVE-2023-28205
CVE-2023-28205 — Apple Multiple Products WebKit Use-After-Free Vulnerability
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2023-04-10 00:00 UTC
- Importiert: 2026-10-21 18:47 UTC
- CVSS: 8.8
- Quelle-ID:
cisa_kev - uid_hash:
1928598e8129b95c94b409d995bf3f9f79a9df1728f3c7d12a03b567a7350b6a
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
8.8 |
HIGH |
8.8 |
2023-04-10 |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CISA – Known Exploited Vulnerabilities (KEV) | threat_intel | cisa, kev | - | de | https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json |