CVE-2023-38594

HighCVSS 8.8

Published: 27/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.13%

62th percentile - higher than 62% of all known CVEs

Summary

The issue was addressed with improved checks. Processing web content may lead to arbitrary code execution.

Risk Assessment

Arbitrary code execution could allow attackers to take control of the device, posing a serious security threat to the organization.

Recommendation

It is recommended to update to the latest versions of iOS, iPadOS, tvOS, macOS, Safari, and watchOS to mitigate this vulnerability.

Other vulnerabilities in iOS, iPadOS, tvOS, macOS, Safari, watchOS

See all

CVE-2023-38600High
The issue was addressed with improved checks. This issue may lead to arbitrary code execution when processing web content.
CVE-2023-38572High
The issue involves the ability of a website to bypass the Same Origin Policy. It has been addressed with improved checks in iOS, iPadOS, tvOS, macOS, Safari, and watchOS.
CVE-2023-38133Medium
The issue was addressed with improved checks. Processing web content may disclose sensitive information.

Original NVD description (English source)

The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution.