CVE-2023-38595

HighCVSS 8.8

Published: 27/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.15%

63th percentile - higher than 63% of all known CVEs

Summary

The issue was addressed with improved checks. This issue may lead to arbitrary code execution when processing web content.

Risk Assessment

Exploitation of this vulnerability could allow attackers to execute malicious code on user devices, posing a serious threat to data security.

Recommendation

It is recommended to update to the latest versions of iOS, iPadOS, tvOS, macOS Ventura, Safari, and watchOS to mitigate the risks associated with this vulnerability.

Other vulnerabilities in iOS, iPadOS, tvOS, macOS Ventura, Safari, watchOS

CVE-2023-38611High
The issue was addressed with improved memory handling. This issue may lead to arbitrary code execution when processing web content.

Original NVD description (English source)

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS