CVE-2023-38611

HighCVSS 8.8

Published: 27/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.15%

63th percentile - higher than 63% of all known CVEs

Summary

The issue was addressed with improved memory handling. This issue may lead to arbitrary code execution when processing web content.

Risk Assessment

Exploitation of this vulnerability could allow attackers to execute arbitrary code remotely, posing a significant security risk.

Recommendation

It is recommended to update to iOS 16.6, iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, or watchOS 9.6 to mitigate this vulnerability.

Other vulnerabilities in iOS, iPadOS, tvOS, macOS Ventura, Safari, watchOS

CVE-2023-38595High
The issue was addressed with improved checks. This issue may lead to arbitrary code execution when processing web content.

Original NVD description (English source)

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS