CVE-2023-38133
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
The issue was addressed with improved checks. Processing web content may disclose sensitive information.
Risk Assessment
Disclosure of sensitive information may lead to privacy violations for users and potential financial losses for the organization.
Recommendation
It is recommended to update systems to iOS 15.7.8, iPadOS 15.7.8, iOS 16.6, iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, and watchOS 9.6.
Other vulnerabilities in iOS, iPadOS, tvOS, macOS, Safari, watchOS
See all- CVE-2023-38600High
The issue was addressed with improved checks. This issue may lead to arbitrary code execution when processing web content.
- CVE-2023-38572High
The issue involves the ability of a website to bypass the Same Origin Policy. It has been addressed with improved checks in iOS, iPadOS, tvOS, macOS, Safari, and watchOS.
- CVE-2023-38594High
The issue was addressed with improved checks. Processing web content may lead to arbitrary code execution.
Original NVD description (English source)
The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may disclose sensitive information.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS