CVE-2023-40451

Reference Links

• http://seclists.org/fulldisclosure/2023/Oct/2
• http://www.openwall.com/lists/oss-security/2023/09/28/3
• https://support.apple.com/en-us/HT213941 (Advisory)
• https://support.apple.com/kb/HT213941
• https://security.gentoo.org/glsa/202401-33
• https://webkitgtk.org/security/WSA-2023-0009.html#CVE-2023-40451
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2241410
• https://access.redhat.com/errata/RHSA-2023:6535
• https://access.redhat.com/errata/RHSA-2023:7055
• https://bugzilla.redhat.com/show_bug.cgi?id=2241409

Parent vulnerabilities

(Appears in the following advisories)

• HT213941

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2023-40417
• CVE-2023-40385
• CVE-2023-42833
• CVE-2023-40414
• CVE-2023-40451
• CVE-2023-41074
• CVE-2023-35074
• CVE-2023-41993

Frequently Asked Questions

• What is the vulnerability ID for this issue in WebKit?

  The vulnerability ID for this issue in WebKit is CVE-2023-40451.

• How was this issue addressed?

  This issue was addressed with improved iframe sandbox enforcement.

• Which software is affected by this vulnerability?

  The Apple Safari browser version up to but excluding 17 is affected by this vulnerability.

• How can I fix this vulnerability?

  To fix this vulnerability, update your Apple Safari browser to version 17 or newer.

• Where can I find more information about this vulnerability?

  More information about this vulnerability can be found on Apple's support page: https://support.apple.com/en-us/HT213941