PT-2023-8133 · Apple+4 · Apple Macos+8

Dong Jun Kim + 3 · Publicado 2022-09-28 · Atualizado 2025-06-11 · CVE-2023-42833

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14 Safari versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17

Description The issue is caused by a buffer overflow in the WebKit component of the macOS operating system. Exploitation of this issue may allow a local attacker to execute arbitrary code using a specially crafted link. Processing web content may lead to arbitrary code execution.

Recommendations For macOS versions prior to Sonoma 14, update to macOS Sonoma 14 to resolve the issue. For Safari versions prior to 17, update to Safari 17 to resolve the issue. For iOS versions prior to 17, update to iOS 17 to resolve the issue. For iPadOS versions prior to 17, update to iPadOS 17 to resolve the issue.

Correção

Code Injection

Buffer Overflow

Enumeração de Fraquezas

CWE-94

CWE-119

Identificadores relacionados

BDU:2024-00112

CESA-2023_7055

CVE-2023-42833

DLA-3124-1

DSA-5240-1

DSA-5241-1

OPENSUSE-SU-2024_0548-1

RHSA-2023:6535

RHSA-2023:7055

RHSA-2023_6535

RHSA-2023_7055

RHSA-2025:10364

SUSE-SU-2024:0519-1

SUSE-SU-2024:0545-1

SUSE-SU-2024:0548-1

Produtos afetados

Astra Linux

Centos

Apple Macos

Red Hat

Safari

Suse

Webkit

Ios

Ipados

Referências · 41

• https://github.com/WebKit/WebKit/commit/50ad0a17b352acd4ca9f2b695c8adce06eec8edb · Nota
• https://cve.org/CVERecord?id=CVE-2023-42833 · Nota de Segurança
• https://support.apple.com/en-us/HT213938 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2024:0548-1 · Aviso do Fabricante
• https://support.apple.com/en-us/HT213940 · Aviso do Fabricante
• https://cybersecurity-help.cz/vdb/SB2023122614 · Nota
• https://t.me/cvenotify/67791 · Publicação no Telegram
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-42833 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2024/suse-su-20240519-1 · Nota
• https://safe-surf.ru/upload/VULN-new/VULN.2023-12-27.1.pdf · Nota de Segurança
• https://ubuntu.com/security/CVE-2023-42833 · Aviso do Fabricante
• https://bugzilla.suse.com/1219113 · Nota
• https://bugzilla.suse.com/1219604 · Nota
• https://support.apple.com/en-us/HT213941 · Aviso do Fabricante
• https://t.me/cvenotify/125407 · Publicação no Telegram