A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-42950US | high8.8 | — | ||
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Proc… | ||||
02
references
External citations — patches, advisories, analysis.
- http://www.openwall.com/lists/oss-security/2024/03/26/1WEB
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IXLXIOAH5S7J22LJTCIAVFVVJ4TESAX4/WEB
- https://nvd.nist.gov/vuln/detail/CVE-2023-42950WEB
- https://openjdk.org/groups/vulnerability/advisories/2024-10-15WEB
- https://security.netapp.com/advisory/ntap-20241018-0009/WEB
- https://support.apple.com/en-us/HT214035ADVISORY
- https://support.apple.com/en-us/HT214036ADVISORY
- https://support.apple.com/en-us/HT214039ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan