VDB
DEBIAN-CVE-2023-38600
DEBIAN-CVE-2023-38600
PUBLISHED
CVSS 8.800000190734863 HIGH
The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution.
Risk Scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | wpewebkit | 0, 0, 0 |
| Debian:11 | webkit2gtk | 2.38.2-1, 2.38.1-1, 2.38.0-3 |
| Debian:12 | wpewebkit | 2.38.6-1, 2.39.91-1, 2.40.0-1 |
| Debian:14 | wpewebkit | 0, 0, 0 |
| Debian:13 | webkit2gtk | 0, 0, 0 |
| Debian:11 | wpewebkit | 2.34.4-1, *, 2.42.5-1.1 |
| Debian:12 | webkit2gtk | 0, 2.40.3-2~deb12u2, 2.40.5-1~deb11u1 |
| Debian:14 | webkit2gtk | 0, 0, 0 |
Exploit Intelligence
- CVE-2023-38600 Test in html (github-poc-repo)
- CVE-2023-38600 Test in html (github-poc)
- macos_v2_generated.go (github-poc)
- macos_v1_generated.go (github-poc)
Timeline
- Jul 27, 2023 CVE Published
- Apr 28, 2026 CVE Updated