CVE-2023-40451

Summary

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 17. An attacker with JavaScript execution may be able to execute arbitrary code.

Affected Software

Weaknesses

• An attacker with JavaScript execution may be able to execute arbitrary code

ADP Enrichment

CVE Program Container

Additional References

• https://support.apple.com/en-us/HT213941
• http://www.openwall.com/lists/oss-security/2023/09/28/3
• http://seclists.org/fulldisclosure/2023/Oct/2
• https://security.gentoo.org/glsa/202401-33
• https://webkitgtk.org/security/WSA-2023-0009.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://support.apple.com/en-us/HT213941
• http://www.openwall.com/lists/oss-security/2023/09/28/3
• http://seclists.org/fulldisclosure/2023/Oct/2
• https://security.gentoo.org/glsa/202401-33

• ←Previous
• Next→