First published: Wed Oct 25 2023(Updated: )
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iOS | <16.7.2 | 16.7.2 |
Apple iPadOS | <16.7.2 | 16.7.2 |
Apple iOS | <17.1 | 17.1 |
Apple iPadOS | <17.1 | 17.1 |
Apple macOS Sonoma | <14.1 | 14.1 |
<17.1 | 17.1 | |
Apple tvOS | <17.1 | 17.1 |
Apple watchOS | <10.1 | 10.1 |
Apple Safari | <17.1 | |
Apple iPadOS | <16.7.2 | |
Apple iPadOS | >=17.0<17.1 | |
Apple iPhone OS | <16.7.2 | |
Apple iPhone OS | >=17.0<17.1 | |
Apple macOS | >=14.0<14.1 | |
Apple tvOS | <17.1 | |
Apple watchOS | <10.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
(Found alongside the following vulnerabilities)
The vulnerability ID of this issue is CVE-2023-40447.
CVE-2023-40447 is a vulnerability in WebKit which, when processing web content, may lead to arbitrary code execution.
CVE-2023-40447 affects macOS Sonoma 14.1, iOS versions up to exclusive 16.7.2, iPadOS versions up to exclusive 16.7.2, Safari up to exclusive version 17.1, tvOS up to exclusive version 17.1, and watchOS up to exclusive version 10.1.
CVE-2023-40447 was fixed with improved memory handling in iOS 17.1 and iPadOS 17.1, watchOS 10.1, macOS Sonoma 14.1, Safari 17.1, and tvOS 17.1.
You can find more information about CVE-2023-40447 on Apple's support website: [support.apple.com](https://support.apple.com/en-us/HT213981)