First published: Mon Jul 24 2023(Updated: )
The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5, Safari 16.6. Processing web content may lead to arbitrary code execution.
Credit: product-security@apple.com product-security@apple.com product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iPadOS | <15.7.8 | |
Apple iPhone OS | <15.7.8 | |
Apple macOS | >=13.0<13.5 | |
Apple iPadOS | >=16.0<16.6 | |
Apple iPhone OS | >=16.0<16.6 | |
Apple Safari | <16.6 | |
ubuntu/webkit2gtk | <2.40.5 | 2.40.5 |
ubuntu/webkit2gtk | <2.40.5-0ubuntu0.22.04.1 | 2.40.5-0ubuntu0.22.04.1 |
ubuntu/webkit2gtk | <2.40.5-0ubuntu0.23.04.1 | 2.40.5-0ubuntu0.23.04.1 |
ubuntu/webkit2gtk | <2.40.5-1 | 2.40.5-1 |
Apple macOS Ventura | <13.5 | 13.5 |
Apple iOS | <16.6 | 16.6 |
Apple iPadOS | <16.6 | 16.6 |
Apple iOS | <15.7.8 | 15.7.8 |
Apple iPadOS | <15.7.8 | 15.7.8 |
Apple Safari | <16.6 | 16.6 |
debian/webkit2gtk | <=2.36.4-1~deb10u1<=2.38.6-0+deb10u1 | 2.42.2-1~deb11u1 2.42.5-1~deb11u1 2.42.2-1~deb12u1 2.42.5-1~deb12u1 2.42.5-1 |
debian/wpewebkit | <=2.38.6-1~deb11u1<=2.38.6-1 | 2.42.5-1 2.42.5-1.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
(Found alongside the following vulnerabilities)
The severity of CVE-2023-38597 is high (8.8).
To fix CVE-2023-38597 on iOS, update to version 15.7.8 or higher.
To fix CVE-2023-38597 on iPadOS, update to version 15.7.8 or higher.
To fix CVE-2023-38597 on macOS, update to version Ventura 13.5 or higher.
To fix CVE-2023-38597 on Safari, update to version 16.6 or higher.