VulnerabilityModified
CVE-2023-27932
Processing maliciously crafted web content may bypass Same Origin Policy.
MEDIUM 5.5EPSS 0.20%
Does this matter?
Lower severity and a low EPSS score (0.20%). Track it; it rarely justifies an emergency change on its own.
Description
This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, tvOS 16.4, watchOS 9.4. Processing maliciously crafted web content may bypass Same Origin Policy.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- EPSS
- 0.20% probability · 10th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-346
- Affected
- apple/safari · apple/ipados · apple/iphone os · apple/macos · apple/tvos · apple/watchos · debian/debian linux
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/HT213670Vendor Advisory
- https://support.apple.com/en-us/HT213671Vendor Advisory
- https://support.apple.com/en-us/HT213674Vendor Advisory
- https://support.apple.com/en-us/HT213676Vendor Advisory
- https://support.apple.com/en-us/HT213678Vendor Advisory
- https://support.apple.com/en-us/HT213670Vendor Advisory
- https://support.apple.com/en-us/HT213671Vendor Advisory
- https://support.apple.com/en-us/HT213674Vendor Advisory
- https://support.apple.com/en-us/HT213676Vendor Advisory
- https://support.apple.com/en-us/HT213678Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.