WebKit/WebRTC Multiple Vulnerabilities Advisory (CVE-2023-38599/32445/38592)

Critical Vulnerability Information WebKit Vulnerabilities Vulnerability 1 - CVE-2023-38599 - Impact: Websites may be able to track sensitive user information. - Description: Logical issue resolved via improved state management. Vulnerability 2 - CVE-2023-32445 - Impact: Processing documents may lead to cross-site scripting attacks. - Description: Issue resolved via improved checks. Vulnerability 3 - CVE-2023-38592 - Impact: Processing web page content may lead to arbitrary code execution. - Description: Logical issue resolved via improved restrictions. Vulnerability 4 - CVE-2023-38572 - Impact: Websites may be able to bypass the same-origin policy. - Description: Issue resolved via improved checks. Vulnerability 5 - CVE-2023-38594 - Impact: Processing web page content may lead to arbitrary code execution. - Description: Issue resolved via improved checks. Vulnerability 6 - CVE-2023-38595 - Impact: Processing web page content may lead to arbitrary code execution. - Description: Issue resolved via improved memory handling. Vulnerability 7 - CVE-2023-38600 - Impact: Not specified. - Description: Issue resolved via improved memory handling. WebKit Process Model and Web Inspector Vulnerabilities CVE-2023-38597 - Impact: Processing web page content may lead to arbitrary code execution. - Description: Issue resolved via improved checks. CVE-2023-38133 - Impact: Processing web page content may lead to sensitive information disclosure. - Description: Issue resolved via improved checks. WebRTC Vulnerabilities CVE-2023-42866 - Impact: Not specified. - Description: Issue resolved via improved checks. Additional Acknowledgments Narendra Bhati Anonymous Researcher Francisco Alonso Junsung Lee YeongHyeon Choi

Goal Reached Thanks to every supporter — we hit 100%!

WebKit/WebRTC Multiple Vulnerabilities Advisory (CVE-2023-38599/32445/38592)