Fiche vulnérabilité
CVE-2023-38572 : faille élevée apple safari (CVSS 7.5)
Description
The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. A website may be able to bypass Same Origin Policy.
En bref
- Sévérité
- Élevée (CVSS 7.5)
- Vecteur CVSS
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- Exploitation active
- Non signalée par la CISA
- Publication
- 27 juil. 2023
- Dernière mise à jour
- 17 juin 2026
Produits concernés
- apple safari
- apple ipados
- apple iphone os
- apple macos
- apple tvos
- apple watchos
Références
- Fiche CVE-2023-38572 sur le NVD (NIST)
- openwall.com/lists/oss-security/2023/08/02/1
- lists.fedoraproject.org/archives/list/package…
- lists.fedoraproject.org/archives/list/package…
- security.gentoo.org/glsa/202401-04
- support.apple.com/en-us/HT213841
- support.apple.com/en-us/HT213842
- support.apple.com/en-us/HT213843
- support.apple.com/en-us/HT213846
- support.apple.com/en-us/HT213847
- support.apple.com/en-us/HT213848
- debian.org/security/2023/dsa-5468