CVE-2023-41993

Published: Sep 21, 2023Modified: Jun 17, 2026CISA KEV

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

Affected (19)

Products: Apple: Ipados, Iphone Os, Macos · Fedoraproject: Fedora · Debian: Debian Linux · +3 more

Show all products

3 products

1 product

1 product

3 products

5 products

Active Iq Unified Manager

Cloud Insights Acquisition Unit

Cloud Insights Storage Workload Security Agent

Oncommand Insight

Oncommand Workflow Automation

Webkitgtk

1 product

Webkitgtk+

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 17.0.1
Apple Iphone Os	Before 17.0.1
Apple Macos	Before 14.0

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 37
Fedoraproject Fedora	Version 38
Fedoraproject Fedora	Version 39

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 11.0
Debian Debian Linux	Version 12.0

Configuration D

4 vulnerable

Vulnerable Software	Affected Versions
Oracle Graalvm	Version 20.3.13
Oracle Graalvm	Version 21.3.9
Oracle Jdk	Version 1.8.0 update401
Oracle Jre	Version 1.8.0 update401

Configuration E

6 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	All versions
Netapp Active Iq Unified Manager	All versions
Netapp Cloud Insights Acquisition Unit	All versions
Netapp Cloud Insights Storage Workload Security Agent	All versions
Netapp Oncommand Insight	All versions
Netapp Oncommand Workflow Automation	All versions