Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-40451

Опубликовано: 27 сент. 2023
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 8.8

Описание

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 17. An attacker with JavaScript execution may be able to execute arbitrary code.

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

ignored

esm-apps/bionic

ignored

esm-apps/focal

ignored

esm-apps/jammy

ignored

esm-apps/noble

ignored

esm-infra/xenial

ignored

focal

ignored

jammy

ignored

lunar

ignored

end of life, was needs-triage

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-apps/bionic

ignored

esm-apps/xenial

ignored

esm-infra/focal

DNE

focal

DNE

jammy

DNE

lunar

DNE

mantic

DNE

noble

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was deferred
devel

released

2.40.5-1
esm-infra/bionic

ignored

esm-infra/focal

ignored

esm-infra/xenial

ignored

focal

ignored

jammy

released

2.40.5-0ubuntu0.22.04.1
lunar

released

2.40.5-0ubuntu0.23.04.1
mantic

released

2.40.5-1
noble

released

2.40.5-1

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-apps/bionic

ignored

esm-apps/xenial

ignored

esm-infra/focal

DNE

focal

DNE

jammy

DNE

lunar

DNE

mantic

DNE

noble

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-apps/focal

ignored

esm-apps/jammy

ignored

focal

ignored

jammy

ignored

lunar

DNE

mantic

DNE

noble

DNE

trusty

ignored

end of standard support

Показывать по

EPSS

Процентиль: 51%
0.00272
Низкий

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
redhat
почти 2 года назад

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 17. An attacker with JavaScript execution may be able to execute arbitrary code.

CVSS3: 8.8
nvd
почти 2 года назад

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 17. An attacker with JavaScript execution may be able to execute arbitrary code.

CVSS3: 8.8
debian
почти 2 года назад

This issue was addressed with improved iframe sandbox enforcement. Thi ...

CVSS3: 8.8
github
почти 2 года назад

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 17. An attacker with JavaScript execution may be able to execute arbitrary code.

CVSS3: 8.8
fstec
почти 2 года назад

Уязвимость модулей отображения веб-страниц WPE WebKit и WebKitGTK, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

EPSS

Процентиль: 51%
0.00272
Низкий

8.8 High

CVSS3