CVE-2023-23518highCWE-787

CVE-2023-23518: fallo de gravedad alta en Apple macOS

Publicada el 27 feb 2023 · Actualizada el 11 mar 2025

Seguir esta CVE + Monitorear macOS + Monitorear iOS

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.8epss 0.9%

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Productos afectados

Apple · iOS and iPadOS Apple · macOS Apple · Safari Apple · tvOS Apple · watchOS

CVEs relacionadas — Apple macOS

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-30860HIGHCVE-2021-30860EPSS 76.0%KEV CVE-2021-30657MEDIUMCVE-2021-30657EPSS 68.5%KEV CVE-2025-43300CRITICALCVE-2025-43300EPSS 63.2%KEV CVE-2023-32434HIGHCVE-2023-32434EPSS 58.2%KEV CVE-2023-41064HIGHCVE-2023-41064EPSS 53.4%KEV CVE-2021-30807HIGHCVE-2021-30807EPSS 28.8%KEV

Referencias

https://support.apple.com/en-us/HT213599 https://support.apple.com/en-us/HT213600 https://support.apple.com/en-us/HT213601 https://support.apple.com/en-us/HT213603 https://support.apple.com/en-us/HT213604 https://support.apple.com/en-us/HT213605 https://support.apple.com/en-us/HT213606 https://support.apple.com/en-us/HT213638