CVE-2023-38599

MediumCVSS 6.5

Published: 28/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.89%

55th percentile - higher than 55% of all known CVEs

Summary

A logic issue was addressed with improved state management. This vulnerability could allow a website to track sensitive user information.

Risk Assessment

The organization may be exposed to the leakage of sensitive user data, potentially leading to privacy violations and loss of trust.

Recommendation

It is recommended to update to the latest versions of Safari, watchOS, iOS, iPadOS, tvOS, and macOS to mitigate this vulnerability.

Original NVD description (English source)

A logic issue was addressed with improved state management. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A website may be able to track sensitive user information.