First published: Mon Jul 24 2023(Updated: )
Processing web content may lead to arbitrary code execution. Description: The issue was addressed with improved checks. <a href="https://webkitgtk.org/security/WSA-2023-0007.html">https://webkitgtk.org/security/WSA-2023-0007.html</a>
Credit: product-security@apple.com product-security@apple.com product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
ubuntu/webkit2gtk | <2.40.5 | 2.40.5 |
ubuntu/webkit2gtk | <2.40.5-0ubuntu0.22.04.1 | 2.40.5-0ubuntu0.22.04.1 |
ubuntu/webkit2gtk | <2.40.5-0ubuntu0.23.04.1 | 2.40.5-0ubuntu0.23.04.1 |
ubuntu/webkit2gtk | <2.40.5-1 | 2.40.5-1 |
Apple macOS Ventura | <13.5 | 13.5 |
Apple Safari | <16.6 | 16.6 |
debian/webkit2gtk | <=2.36.4-1~deb10u1<=2.38.6-0+deb10u1 | 2.42.2-1~deb11u1 2.42.5-1~deb11u1 2.42.2-1~deb12u1 2.42.5-1~deb12u1 2.42.5-1 |
debian/wpewebkit | <=2.38.6-1~deb11u1<=2.38.6-1 | 2.42.5-1 2.42.5-1.1 |
Apple iOS | <16.6 | 16.6 |
Apple iPadOS | <16.6 | 16.6 |
Apple iOS | <15.7.8 | 15.7.8 |
Apple iPadOS | <15.7.8 | 15.7.8 |
Apple Safari | <16.6 | |
Apple iPadOS | <15.7.8 | |
Apple iPadOS | >=16.0<16.6 | |
Apple iPhone OS | <15.7.8 | |
Apple iPhone OS | >=16.0<16.6 | |
Apple macOS | >=13.0<13.5 | |
redhat/webkitgtk | <2.40.5 | 2.40.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
(Found alongside the following vulnerabilities)
The severity of CVE-2023-38597 is high (8.8).
To fix CVE-2023-38597 on iOS, update to version 15.7.8 or higher.
To fix CVE-2023-38597 on iPadOS, update to version 15.7.8 or higher.
To fix CVE-2023-38597 on macOS, update to version Ventura 13.5 or higher.
To fix CVE-2023-38597 on Safari, update to version 16.6 or higher.