Apple Safari/WebKit Multiple High-Severity Vulnerabilities Advisory (CVE-2023-42833 etc.)

Critical Vulnerability Information Safari 17 CVE-2023-40417: - Impact: Visiting a website containing malicious content could lead to UI spoofing. - Description: A window management issue has been resolved through improved state management. WebKit CVE-2023-40386: - Impact: Remote attackers may be able to view DNS queries leaked during Private Relay usage. - Description: The issue has been resolved by removing vulnerable code. CVE-2023-42833: - Impact: Processing web content could lead to arbitrary code execution. - Description: A correctness issue has been resolved through improved checks. CVE-2023-40414: - Impact: Processing web content could lead to arbitrary code execution. - Description: A use-after-free issue has been resolved through improved memory management. CVE-2023-42970: - Impact: Processing web content could lead to arbitrary code execution. - Description: The issue has been resolved through improved checks. CVE-2023-40451: - Impact: Attackers with JavaScript execution privileges may be able to execute arbitrary code. - Description: The issue has been resolved through improved iframe sandbox enforcement. CVE-2023-41074: - Impact: Processing web content could lead to arbitrary code execution. - Description: The issue has been resolved through improved memory handling. CVE-2023-42875: - Impact: Processing web content could lead to arbitrary code execution. - Description: The issue has been resolved through improved checks. CVE-2023-41993: - Impact: Processing web content could lead to arbitrary code execution. Apple is aware of reports indicating this issue may have been actively exploited in versions prior to iOS 16.7. - Description: The issue has been resolved through improved checks.

Goal Reached Thanks to every supporter — we hit 100%!

Apple Safari/WebKit Multiple High-Severity Vulnerabilities Advisory (CVE-2023-42833 etc.)