PT-2023-8133 · Apple+4 · Apple Macos+8

Dong Jun Kim + 3 · Published 2022-09-28 · Updated 2025-06-11 · CVE-2023-42833

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14 Safari versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17

Description The issue is caused by a buffer overflow in the WebKit component of the macOS operating system. Exploitation of this issue may allow a local attacker to execute arbitrary code using a specially crafted link. Processing web content may lead to arbitrary code execution.

Recommendations For macOS versions prior to Sonoma 14, update to macOS Sonoma 14 to resolve the issue. For Safari versions prior to 17, update to Safari 17 to resolve the issue. For iOS versions prior to 17, update to iOS 17 to resolve the issue. For iPadOS versions prior to 17, update to iPadOS 17 to resolve the issue.

Fix

Code Injection

Buffer Overflow

Weakness Enumeration

CWE-94

CWE-119

Related Identifiers

BDU:2024-00112

CESA-2023_7055

CVE-2023-42833

DLA-3124-1

DSA-5240-1

DSA-5241-1

OPENSUSE-SU-2024_0548-1

RHSA-2023:6535

RHSA-2023:7055

RHSA-2023_6535

RHSA-2023_7055

RHSA-2025:10364

SUSE-SU-2024:0519-1

SUSE-SU-2024:0545-1

SUSE-SU-2024:0548-1

Affected Products

Astra Linux

Centos

Apple Macos

Red Hat

Safari

Suse

Webkit

Ios

Ipados

References · 41

• https://cve.org/CVERecord?id=CVE-2023-42833 · Security Note
• https://support.apple.com/en-us/HT213938 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:0548-1 · Vendor Advisory
• https://support.apple.com/en-us/HT213940 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-42833 · Vendor Advisory
• https://safe-surf.ru/upload/VULN-new/VULN.2023-12-27.1.pdf · Security Note
• https://ubuntu.com/security/CVE-2023-42833 · Vendor Advisory
• https://support.apple.com/en-us/HT213941 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-00112 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/703129 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-42833 · Security Note
• https://osv.dev/vulnerability/CVE-2023-42833 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3124-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-42833 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5240-1 · Vendor Advisory