CVE-2023-41993

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

he issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

References

Link	Resource
https://security.gentoo.org/glsa/202401-33	Third Party Advisory
https://security.netapp.com/advisory/ntap-20240426-0004/	Third Party Advisory
https://support.apple.com/en-us/HT213940	Vendor Advisory
https://security.gentoo.org/glsa/202401-33	Third Party Advisory
https://security.netapp.com/advisory/ntap-20240426-0004/	Third Party Advisory
https://support.apple.com/en-us/HT213940	Vendor Advisory
https://support.apple.com/kb/HT213926	Vendor Advisory
https://support.apple.com/kb/HT213930	Vendor Advisory
https://webkitgtk.org/security/WSA-2023-0009.html	Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41993	US Government Resource

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:iphone_os::::::::
	cpe:2.3:o:apple:macos::::::::

Configuration 2 (hide)

OR	cpe:2.3:o:fedoraproject:fedora:37:::::::*
	cpe:2.3:o:fedoraproject:fedora:38:::::::*
	cpe:2.3:o:fedoraproject:fedora:39:::::::*

Configuration 3 (hide)

OR	cpe:2.3:o:debian:debian_linux:11.0:::::::*
	cpe:2.3:o:debian:debian_linux:12.0:::::::*

Configuration 4 (hide)

OR	cpe:2.3:a:oracle:graalvm:20.3.13::::enterprise:::
	cpe:2.3:a:oracle:graalvm:21.3.9::::enterprise:::
	cpe:2.3:a:oracle:jdk:1.8.0:update401::::::
	cpe:2.3:a:oracle:jre:1.8.0:update401::::::

Configuration 5 (hide)

OR	cpe:2.3:a:netapp:active_iq_unified_manager:-:::::vsphere::
	cpe:2.3:a:netapp:active_iq_unified_manager:-:::::windows::
	cpe:2.3:a:netapp:cloud_insights_acquisition_unit:-:::::::*
	cpe:2.3:a:netapp:cloud_insights_storage_workload_security_agent:-:::::::*
	cpe:2.3:a:netapp:oncommand_insight:-:::::::*
	cpe:2.3:a:netapp:oncommand_workflow_automation:-:::::::*

Configuration 6 (hide)

cpe:2.3:a:webkitgtk:webkitgtk\+:*:*:*:*:*:*:*:*

History

05 Nov 2025, 19:17

Type	Values Removed	Values Added
References	~~() https://support.apple.com/kb/HT213926 -~~	() https://support.apple.com/kb/HT213926 - Vendor Advisory
References	~~() https://support.apple.com/kb/HT213930 -~~	() https://support.apple.com/kb/HT213930 - Vendor Advisory

04 Nov 2025, 20:16

Type	Values Removed	Values Added
References		() https://support.apple.com/kb/HT213926 - () https://support.apple.com/kb/HT213930 -

23 Oct 2025, 18:48

Type	Values Removed	Values Added
References	~~() https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41993 -~~	() https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41993 - US Government Resource

21 Oct 2025, 23:16

Type	Values Removed	Values Added
References		() https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41993 -

21 Oct 2025, 20:19

Type	Values Removed	Values Added
References	~~{'url': 'https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41993', 'source': '134c704f-9b21-4f2e-91b3-4a467353bcc0'}~~

21 Oct 2025, 19:20

Type	Values Removed	Values Added
References		() https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41993 -

29 Nov 2024, 14:43

Type	Values Removed	Values Added
References	~~() https://support.apple.com/en-us/HT213940 - Release Notes, Vendor Advisory~~	() https://support.apple.com/en-us/HT213940 - Vendor Advisory
References	~~() https://webkitgtk.org/security/WSA-2023-0009.html -~~	() https://webkitgtk.org/security/WSA-2023-0009.html - Third Party Advisory
CPE		cpe:2.3:a:netapp:active_iq_unified_manager:-:::::windows:: cpe:2.3:a:netapp:active_iq_unified_manager:-:::::vsphere::
First Time		Netapp active Iq Unified Manager

21 Nov 2024, 08:22

Type	Values Removed	Values Added
References		() https://webkitgtk.org/security/WSA-2023-0009.html -
References	~~() https://security.gentoo.org/glsa/202401-33 - Third Party Advisory~~	() https://security.gentoo.org/glsa/202401-33 - Third Party Advisory
References	~~() https://security.netapp.com/advisory/ntap-20240426-0004/ - Third Party Advisory~~	() https://security.netapp.com/advisory/ntap-20240426-0004/ - Third Party Advisory
References	~~() https://support.apple.com/en-us/HT213940 - Release Notes, Vendor Advisory~~	() https://support.apple.com/en-us/HT213940 - Release Notes, Vendor Advisory

03 Sep 2024, 20:19

Type	Values Removed	Values Added
CPE		cpe:2.3:a:webkitgtk:webkitgtk\+::::::::
First Time		Webkitgtk webkitgtk\+ Webkitgtk

14 Aug 2024, 15:28

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~9.8~~	v2 : unknown v3 : 8.8

23 May 2024, 17:51

Type	Values Removed	Values Added
References	~~() https://security.gentoo.org/glsa/202401-33 -~~	() https://security.gentoo.org/glsa/202401-33 - Third Party Advisory
References	~~() https://security.netapp.com/advisory/ntap-20240426-0004/ -~~	() https://security.netapp.com/advisory/ntap-20240426-0004/ - Third Party Advisory
First Time		Netapp oncommand Insight Oracle jdk Netapp cloud Insights Storage Workload Security Agent Oracle jre Netapp cloud Insights Acquisition Unit Netapp Oracle Netapp oncommand Workflow Automation Oracle graalvm
CPE	cpe:2.3:o:apple:iphone_os:17.0:::::::* cpe:2.3:o:apple:ipados:17.0:::::::* cpe:2.3:a:apple:safari::::::::	cpe:2.3:a:netapp:oncommand_insight:-:::::::* cpe:2.3:a:oracle:graalvm:21.3.9::::enterprise::: cpe:2.3:a:oracle:graalvm:20.3.13::::enterprise::: cpe:2.3:a:oracle:jdk:1.8.0:update401:::::: cpe:2.3:a:oracle:jre:1.8.0:update401:::::: cpe:2.3:a:netapp:cloud_insights_acquisition_unit:-:::::::* cpe:2.3:a:netapp:oncommand_workflow_automation:-:::::::* cpe:2.3:a:netapp:cloud_insights_storage_workload_security_agent:-:::::::*