高危
Apple WebKit代码执行漏洞
2024-01-23 00:00:00 公开 ，2026-04-02 19:34:14 更新
- CISA KEV
- 关键漏洞
- APT漏洞
- 勒索软件漏洞
- 远程
- 无需认证
- 开源组件漏洞
- 2024两高一弱互联网漏洞
- 公开PoC
- 2025两高一弱漏洞
- CWEs：
- CWE-843 （Type Confusion）
- SSVC：
- 可利用状态：已被积极利用攻击自动化：否技术影响评估：全部 2024-02-01 13:00:05
风险信息
- CVSS v3 向量
- AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS v3 风险值
- 8.8
- CVSS v3.1 向量
- AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS v3.1 风险值
- 8.8
详细信息
- 漏洞类型
- 通用型漏洞
- 漏洞描述
- 由于WebKit中的类型混淆，tvOS、iOS、iPadOS、macOS Sonoma、Safari、macOS Ventura、macOS Monterey可能允许远程攻击者在系统上执行任意代码。通过说服受害者访问特制的网站，攻击者可以利用此漏洞在系统上执行任意代码。
- 修复建议
- 此问题已在tvOS 17.3、iOS 17.3和iPadOS 17.3、macOS Sonoma 14.3、iOS 16.7.5和iPadOS 16.7.5、Safari 17.3、macOS Ventura 13.6.4、macOS Monterey 12.7.3中修复。有关修补程序、升级或建议的解决方法信息，请参阅链接： https://support.apple.com/en-us/HT214055 https://support.apple.com/en-us/HT214056 https://support.apple.com/en-us/HT214057 https://support.apple.com/en-us/HT214058 https://support.apple.com/en-us/HT214059 https://support.apple.com/en-us/HT214061 https://support.apple.com/en-us/HT214063
参考链接
- https://bugzilla.redhat.com/show_bug.cgi?id=2259893
Snyk
- https://osv.dev/vulnerability/CVE-2024-23222
OSV
- https://osv.dev/vulnerability/DSA-5618-1
OSV
- https://osv.dev/vulnerability/UBUNTU-CVE-2024-23222
OSV
- https://security-tracker.debian.org/tracker/CVE-2024-23222
OSV
- https://support.apple.com/en-us/HT214055
OSV · Vendor Advisory · Release Notes
- https://support.apple.com/en-us/HT214056
OSV
- https://support.apple.com/en-us/HT214057
OSV
- https://support.apple.com/en-us/HT214058
OSV
- https://support.apple.com/en-us/HT214059
OSV · Vendor Advisory · Release Notes
- https://support.apple.com/en-us/HT214061
OSV · Vendor Advisory · Release Notes
- https://support.apple.com/en-us/HT214063
OSV
- https://support.apple.com/kb/HT214055
CVE · Vendor Advisory · Release Notes
- https://support.apple.com/kb/HT214056
CVE · Vendor Advisory · Release Notes
- https://support.apple.com/kb/HT214057
CVE · Vendor Advisory
- https://support.apple.com/kb/HT214058
CVE · Vendor Advisory
- https://support.apple.com/kb/HT214059
CVE · Vendor Advisory · Release Notes
- https://support.apple.com/kb/HT214061
CVE · Vendor Advisory
- https://support.apple.com/kb/HT214063
CVE · Vendor Advisory
- https://ubuntu.com/security/CVE-2024-23222
OSV
- https://ubuntu.com/security/notices/USN-6631-1
OSV
- https://webkitgtk.org/security/WSA-2024-0001.html
OSV
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Snyk
- https://www.cve.org/CVERecord?id=CVE-2024-23222
OSV
- https://osv.dev/vulnerability/DEBIAN-CVE-2024-23222
OSV
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-23222
NVD · US Government Resource
- http://seclists.org/fulldisclosure/2024/Feb/6
NVD · Third Party Advisory
- https://support.apple.com/kb/HT214070
NVD · Vendor Advisory
- http://seclists.org/fulldisclosure/2024/Jan/34
NVD · Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/US43EQFC2IS66EA2CPAZFH2RQ6WD7PKF/
NVD · Broken Link
- http://seclists.org/fulldisclosure/2024/Jan/40
NVD · Third Party Advisory
- https://support.apple.com/en-us/126632
CVE · Release Notes · Vendor Advisory
- https://support.apple.com/en-us/120311
CVE · Release Notes · Vendor Advisory
- https://support.apple.com/en-us/120310
CVE · Release Notes · Vendor Advisory
- https://support.apple.com/en-us/120304
CVE · Release Notes · Vendor Advisory
- https://support.apple.com/en-us/120309
CVE · Release Notes · Vendor Advisory
- https://support.apple.com/en-us/118479
CVE · Vendor Advisory · Release Notes
- https://support.apple.com/en-us/120305
CVE · Vendor Advisory · Release Notes
- https://support.apple.com/en-us/120307
CVE · Vendor Advisory · Release Notes
- https://support.apple.com/en-us/120339
CVE · Vendor Advisory · Release Notes