Exploited vulnerability

CVE-2023-32409

TLP:CLEAR

Apple Multiple Products WebKit Sandbox Escape Vulnerability

Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an unspecified vulnerability that can allow a remote attacker to break out of the Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Facts

Vendor: Apple
Product: Multiple Products
CVSS: 8.6
EPSS (probability of exploitation within 30 days): 16.5 %
On CISA's Known Exploited Vulnerabilities list since: 22 May 2023
First known exploitation: 22 May 2023
CISA's deadline for US federal agencies: 12 June 2023
First seen by Risk Letters: 22 May 2023

Members see which Nordic sectors the flaw hits, and what to do about it.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD