CVE-2023-27932

Published: May 8, 2023Modified: Jan 29, 2025

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, tvOS 16.4, watchOS 9.4. Processing maliciously crafted web content may bypass Same Origin Policy.

Affected (7)

Products: Apple: Ipados, Iphone Os, Macos, Safari, Tvos, Watchos · Debian: Debian Linux

6 products

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 16.4
Apple Iphone Os	Before 16.4
Apple Macos	Before 13.3
Apple Safari	Before 16.4
Apple Tvos	Before 16.4
Apple Watchos	Before 9.4

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0

Related CWEs

CWE-346

Origin Validation Error

The product does not properly verify that the source of data or communication is valid.