VDB
CVE-2023-40417
CVE-2023-40417
PUBLISHED
Es bestehen mehrere Schwachstellen in Apple Safari. Diese Fehler existieren in der WebKit-Komponente, werden aber nicht näher erläutert. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen oder UI-Spoofing zu betreiben. Eine erfolgreiche Ausnutzung erfordert eine Interaktion des Nutzers.
EPSS 0.42% · 62.5th percentile
Risk Scores
EPSS Score
0.42%
62.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Apple iOS <16.7 | |
| Apple | Apple iOS <17 | |
| Apple | Apple macOS Ventura <13.6 | |
| Apple | Apple macOS Monterey <12.7 | |
| Apple | Apple macOS Sonoma <14 | |
| Apple | Apple iPadOS <17 | |
| Apple | Apple iPadOS <16.7 |
Exploit Intelligence
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog (certbund)
- macos_v2_generated.go (github-poc)
- macos_v2_generated.go (github-poc)
- macos_v2_generated.go (github-poc)
- macos_v2_generated.go (github-poc)
- macos_v2_generated.go (github-poc)
- macos_v1_generated.go (github-poc)
- macos_v1_generated.go (github-poc)
- macos_v1_generated.go (github-poc)
- macos_v1_generated.go (github-poc)
…and 16 more exploits
Timeline
- Sep 26, 2023 CVE Published
- Sep 27, 2023 EPSS Score
- Oct 29, 2023 EPSS Score
- Nov 30, 2023 EPSS Score
- Jan 1, 2024 EPSS Score
- Feb 2, 2024 EPSS Score
- Mar 5, 2024 EPSS Score
- Apr 6, 2024 EPSS Score
- May 8, 2024 EPSS Score
- Jun 8, 2024 EPSS Score
- Jul 10, 2024 EPSS Score
- Aug 11, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2452.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2452 advisory
- https://support.apple.com/en-us/HT213941 advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2453.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2453 advisory
- https://support.apple.com/en-us/HT213931 advisory
- https://support.apple.com/en-us/HT213932 advisory
- https://support.apple.com/en-us/HT213940 advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2454.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2454 advisory
- https://support.apple.com/en-us/HT213927 advisory
- https://support.apple.com/en-us/HT213938 advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog exploit