CVE-2023-40451

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 1.0%

probabilidade de exploração

1.0%top 40% das CVEs

exploração observada

nãonenhuma fonte reporta

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 17. An attacker with JavaScript execution may be able to execute arbitrary code.

Produtos afetados

Apple · Safari

Referências

http://seclists.org/fulldisclosure/2023/Oct/2 https://security.gentoo.org/glsa/202401-33 https://support.apple.com/en-us/HT213941 https://webkitgtk.org/security/WSA-2023-0009.html http://www.openwall.com/lists/oss-security/2023/09/28/3