CVE-2023-38572
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk57th percentile - higher than 57% of all known CVEs
Summary
The issue involves the ability of a website to bypass the Same Origin Policy. It has been addressed with improved checks in iOS, iPadOS, tvOS, macOS, Safari, and watchOS.
Risk Assessment
Bypassing the Same Origin Policy may lead to unauthorized access to user data, posing a significant security risk to web applications.
Recommendation
It is recommended to update systems to the latest versions to mitigate this issue.
Other vulnerabilities in iOS, iPadOS, tvOS, macOS, Safari, watchOS
See all- CVE-2023-38600High
The issue was addressed with improved checks. This issue may lead to arbitrary code execution when processing web content.
- CVE-2023-38594High
The issue was addressed with improved checks. Processing web content may lead to arbitrary code execution.
- CVE-2023-38133Medium
The issue was addressed with improved checks. Processing web content may disclose sensitive information.
Original NVD description (English source)
The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. A website may be able to bypass Same Origin Policy.