CVE-2023-40451

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.0%

exploitation probability

1.0%top 40% of all CVEs

observed exploitation

nono source reports it

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 17. An attacker with JavaScript execution may be able to execute arbitrary code.

Affected products

Apple · Safari

References

http://seclists.org/fulldisclosure/2023/Oct/2 https://security.gentoo.org/glsa/202401-33 https://support.apple.com/en-us/HT213941 https://webkitgtk.org/security/WSA-2023-0009.html http://www.openwall.com/lists/oss-security/2023/09/28/3