CVE-2023-38600

HighCVSS 8.8

Published: 27/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.35%

68th percentile - higher than 68% of all known CVEs

Summary

The issue was addressed with improved checks. This issue may lead to arbitrary code execution when processing web content.

Risk Assessment

Exploitation of this vulnerability could allow attackers to execute arbitrary code remotely, posing a significant security risk.

Recommendation

It is recommended to update to iOS 16.6, iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, or watchOS 9.6 to mitigate this vulnerability.

Other vulnerabilities in iOS, iPadOS, tvOS, macOS, Safari, watchOS

See all

CVE-2023-38572High
The issue involves the ability of a website to bypass the Same Origin Policy. It has been addressed with improved checks in iOS, iPadOS, tvOS, macOS, Safari, and watchOS.
CVE-2023-38594High
The issue was addressed with improved checks. Processing web content may lead to arbitrary code execution.
CVE-2023-38133Medium
The issue was addressed with improved checks. Processing web content may disclose sensitive information.

Original NVD description (English source)

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution.