CVE-2023-28198

Опубликовано: 14 авг. 2023

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead to arbitrary code execution.

Ссылки

http://www.openwall.com/lists/oss-security/2023/09/11/1
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/202401-04
https://support.apple.com/en-us/HT213670
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT213676
Release Notes
Vendor Advisory
http://www.openwall.com/lists/oss-security/2023/09/11/1
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/202401-04
https://support.apple.com/en-us/HT213670
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT213676
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 16.4 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 16.4 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 13.0 (включая) до 13.3 (исключая)

Конфигурация 2

Одно из

cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*

Версия до 2.40.1 (исключая)

cpe:2.3:a:wpewebkit:wpe_webkit:*:*:*:*:*:*:*:*

Версия до 2.40.1 (исключая)

EPSS

Процентиль: 17%

0.00055

Низкий

8.8 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2023-28198

CVSS3: 8.8

ubuntu

около 2 лет назад

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead to arbitrary code execution.

CVE-2023-28198

CVSS3: 8.8

redhat

почти 2 года назад

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead to arbitrary code execution.

CVE-2023-28198

CVSS3: 8.8

debian

около 2 лет назад

A use-after-free issue was addressed with improved memory management. ...

GHSA-p6rj-wprj-c52h

CVSS3: 8.8

github

около 2 лет назад

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead to arbitrary code execution.

BDU:2023-04538

CVSS3: 8.8

fstec

больше 2 лет назад

Уязвимость модуля отображения веб-страниц WebKit операционной системы macOS, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 17%

0.00055

Низкий

8.8 High

CVSS3

Дефекты

CWE-416