CVE-2023-38594
Summary
| CVE | CVE-2023-38594 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-07-27 00:15:00 UTC |
| Updated | 2024-01-05 14:15:00 UTC |
| Description | The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Apple | Ipados | All | All | All | All |
| Operating System | Apple | Iphone Os | All | All | All | All |
| Operating System | Apple | Macos | All | All | All | All |
| Application | Apple | Safari | All | All | All | All |
| Operating System | Apple | Tvos | All | All | All | All |
| Operating System | Apple | Watchos | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Debian -- Security Information -- DSA-5468-1 webkit2gtk | MISC | www.debian.org | |
| [SECURITY] Fedora 38 Update: webkitgtk-2.40.5-1.fc38 - package-announce - Fedora Mailing-Lists | MISC | lists.fedoraproject.org | |
| oss-security - WebKitGTK and WPE WebKit Security Advisory WSA-2023-0007 | MISC | www.openwall.com | |
| security.gentoo.org/glsa/202401-04 | security.gentoo.org | ||
| About the security content of macOS Ventura 13.5 - Apple Support | MISC | support.apple.com | |
| About the security content of iOS 15.7.8 and iPadOS 15.7.8 - Apple Support | MISC | support.apple.com | |
| About the security content of Safari 16.6 - Apple Support | MISC | support.apple.com | |
| [SECURITY] Fedora 37 Update: webkitgtk-2.40.5-1.fc37 - package-announce - Fedora Mailing-Lists | MISC | lists.fedoraproject.org | |
| About the security content of watchOS 9.6 - Apple Support | MISC | support.apple.com | |
| About the security content of tvOS 16.6 - Apple Support | MISC | support.apple.com | |
| About the security content of iOS 16.6 and iPadOS 16.6 - Apple Support | MISC | support.apple.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 161084 Oracle Enterprise Linux Security Update for webkit2gtk3 (ELSA-2023-6535)
- 161167 Oracle Enterprise Linux Security Update for webkit2gtk3 (ELSA-2023-7055)
- 199658 Ubuntu Security Notification for WebKitGTK Vulnerabilities (USN-6289-1)
- 242303 Red Hat Update for webkit2gtk3 (RHSA-2023:6535)
- 242457 Red Hat Update for webkit2gtk3 (RHSA-2023:7055)
- 284360 Fedora Security Update for webkitgtk (FEDORA-2023-a479289864)
- 284417 Fedora Security Update for webkitgtk (FEDORA-2023-19754c5a93)
- 356402 Amazon Linux Security Advisory for webkitgtk4 : ALAS2-2023-2270
- 378687 Apple macOS Ventura 13.5 Not Installed (HT213843)
- 378690 Apple Safari Multiple Vulnerabilities (HT213847)
- 6000203 Debian Security Update for webkit2gtk (DSA 5468-1)
- 610497 Apple iOS 15.7.8 and iPadOS 15.7.8 Security Update Missing
- 610498 Apple iOS 16.6 and iPadOS 16.6 Security Update Missing
- 710824 Gentoo Linux WebKitGTK+ Multiple Vulnerabilities (GLSA 202401-04)
- 754255 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2023:3233-1)
- 754260 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2023:3237-1)
- 754273 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2023:3300-1)
- 754916 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2023:3753-1)
- 941362 AlmaLinux Security Update for webkit2gtk3 (ALSA-2023:6535)
- 941448 AlmaLinux Security Update for webkit2gtk3 (ALSA-2023:7055)