超危
Apple iOS, iPadOS, macOS和Safari WebKit代码执行漏洞
2023-09-21 00:00:00 公开 ，2026-05-06 16:41:47 更新
- 关键漏洞
- CISA KEV
- 勒索软件漏洞
- 远程
- 无需认证
- 开源组件漏洞
- CWE Top 25 (2023)
- CWE Top 25 (2024)
- 公开PoC
- SSVC：
- 可利用状态：已被积极利用攻击自动化：否技术影响评估：全部 2024-01-11 10:17:52
风险信息
- CVSS v3 向量
- AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v3 风险值
- 9.8
- CVSS v3.1 向量
- AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v3.1 风险值
- 9.8
详细信息
- 漏洞类型
- 其他
- 漏洞描述
- Apple Safari、macOS Ventura、iOS和iPadOS可能允许远程攻击者在系统上执行由WebKit组件错误引起的任意代码。通过说服受害者打开特制的web内容，攻击者可以利用此漏洞在系统上执行任意代码。在iOS 16.7之前的iOS版本中，此问题正在被积极利用。
- 修复建议
- 此问题已在iOS 16.7和iPadOS 16.7、iOS 17.0.1和iPadOS17.0.1、Safari 16.6.1中修复，有关补丁、升级或建议的解决方法信息，请参阅苹果安全文档： https://support.apple.com/en-us/HT213926 https://support.apple.com/en-us/HT213927 https://support.apple.com/en-us/HT213930
参考链接
- https://support.apple.com/en-us/HT213927
NVD · Release Notes · Vendor Advisory
- https://support.apple.com/en-us/HT213941
NVD · Release Notes · Vendor Advisory
- https://support.apple.com/en-us/HT213940
CVE · Release Notes · Vendor Advisory
- https://support.apple.com/kb/HT213926
OSV · Vendor Advisory
- http://www.openwall.com/lists/oss-security/2023/09/28/3
NVD · Mailing List · Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EYRHTFVN6FTXLZ27IPTNRSXKBAR2SOMA/
NVD · Mailing List · Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ELXBV26Q54BIOVN5LBCJFM2G6VQZ7FO/
NVD · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Oct/2
NVD · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Oct/3
NVD · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2023/Oct/4
NVD · Mailing List · Third Party Advisory
- https://www.debian.org/security/2023/dsa-5527
NVD · Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EEMDC5TQAANFH5D77QM34ZTUKXPFGVL/
NVD · Mailing List
- https://support.apple.com/kb/HT213930
OSV · Vendor Advisory
- https://security.gentoo.org/glsa/202401-33
CVE · Third Party Advisory
- https://osv.dev/vulnerability/DSA-5527-1
OSV
- https://security.netapp.com/advisory/ntap-20240426-0004/
CVE · Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2240522
Snyk
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Snyk
- https://osv.dev/vulnerability/CVE-2023-41993
OSV
- https://security-tracker.debian.org/tracker/CVE-2023-41993
OSV
- https://ubuntu.com/security/CVE-2023-41993
OSV
- https://webkitgtk.org/security/WSA-2023-0009.html
OSV · Third Party Advisory
- https://www.openwall.com/lists/oss-security/2023/09/28/3
OSV
- https://ubuntu.com/security/notices/USN-6426-1
OSV
- https://www.cve.org/CVERecord?id=CVE-2023-41993
OSV
- https://osv.dev/vulnerability/UBUNTU-CVE-2023-41993
OSV
- https://osv.dev/vulnerability/DEBIAN-CVE-2023-41993
OSV
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41993
OSV · US Government Resource
- https://nvd.nist.gov/vuln/detail/CVE-2023-41993
OSV
- https://openjdk.org/groups/vulnerability/advisories/2024-04-16
OSV
- https://osv.dev/vulnerability/BIT-java-2023-41993
OSV
- https://osv.dev/vulnerability/BIT-java-min-2023-41993
OSV
- https://support.apple.com/en-us/HT213931
CNNVD
- http://seclists.org/fulldisclosure/2023/Sep/15
CNNVD
- https://www.auscert.org.au/bulletins/ESB-2023.6438
CNNVD
- http://seclists.org/fulldisclosure/2023/Sep/19
CNNVD
- https://support.apple.com/en-us/HT213930
CNNVD
- https://www.auscert.org.au/bulletins/ESB-2023.5473
CNNVD
- http://seclists.org/fulldisclosure/2023/Sep/14
CNNVD
- https://cxsecurity.com/cveshow/CVE-2023-41993/
CNNVD
- https://www.auscert.org.au/bulletins/ESB-2023.5976
CNNVD
- https://support.apple.com/en-us/HT213926
CNNVD
- http://seclists.org/fulldisclosure/2023/Sep/13
CNNVD