The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.8 and iPadOS 15.7.8, Safari 16.5, iOS 16.5 and iPadOS 16.5. A remote attacker may be able to break out of Web Content sandbox. Apple is aware of a report that this issue may have been actively exploited.
CVSS Details
- CVSS 3.1 Base Score: 8.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-jscUpgrade webkitgtk4Upgrade webkitgtk4-develUpgrade webkitgtk4-debuginfoUpgrade webkitgtk4-jsc-devel | Jun 13, 2023 | Jun 13, 2023 |
| Apple Osx Accessibility | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Accounts | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Amd | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Applemobilefileintegrity | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Associateddomains | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Contacts | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Corelocation | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Coreservices | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Cups | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Dcerpc | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Desktopservices | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Facegallery | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Geoservices | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Imageio | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Iosurface | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Iosurfaceaccelerator | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Kernel | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Launchservices | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Libxml2 | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Libxpc | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Mallocstacklogging | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Metal | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Mobilestoragemounter | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Modelio | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Networkextension | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Nsurlsession | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Packagekit | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Pdfkit | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Perl | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Photos | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Quicklook | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Sandbox | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Screensaver | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Security | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Sharesheet | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Shell | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Shortcuts | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Siri | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Sqlite | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Storagekit | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Sudo | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Systemsettings | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Telephony | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Tvapp | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Weather | — | — | Oct 14, 2024 | Jun 23, 2023 |
| Apple Osx Webkit | — | Upgrade macOS to the latest version | Jun 7, 2023 | Jun 7, 2023 |
| Apple Safari | — | Upgrade to Apple Safari version 16.5Uninstall Apple Safari on Windows | May 19, 2023 | May 19, 2023 |
| Debian | — | Upgrade wpewebkitUpgrade webkit2gtk | Jul 30, 2024 | Jun 23, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 23, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub