EXPOSURES › CVE-2023-28204

CVE-2023-28204

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2023-05-22 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2023-28204 ↗

⌖ EXPLOITED IN THE WILD SHAME 72/100 exploited-in-wildunpatched

Apple WebKit out-of-bounds read vulnerability

Apple's WebKit in iOS, iPadOS, macOS, tvOS, watchOS, and Safari contains an out-of-bounds read vulnerability that could disclose sensitive information. This affects HTML parsers and could impact non-Apple products using WebKit. Immediate patching is crucial to prevent exploitation.

Shame score — This vulnerability could lead to sensitive information disclosure, impacting multiple Apple products and potentially non-Apple products. The lack of immediate patching could have significant exposure.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

apple · vendor Multiple Products · product

DESCRIPTION

Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.