{"id":"CVE-2023-23496","state":"PUBLISHED","title":"The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.2, watchOS 9.3, iOS 15.7.2 and iPadOS 15.7.2, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3","description":"The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.2, watchOS 9.3, iOS 15.7.2 and iPadOS 15.7.2, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution.","publishedAt":"2023-02-27T00:00:00.000Z","updatedAt":"2025-03-11T13:55:41.336Z","severity":null,"assigner":"apple","products":["Apple iOS and iPadOS","Apple tvOS","Apple Safari","Apple macOS","Apple watchOS"],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16.3","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16.3","versionType":"custom"}]},{"vendor":"Apple","product":"Safari","versions":[{"version":"unspecified","status":"affected","lessThan":"16.3","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"unspecified","status":"affected","lessThan":"15.7","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"13.2","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"unspecified","status":"affected","lessThan":"9.3","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/HT213606","https://support.apple.com/en-us/HT213601","https://support.apple.com/en-us/HT213600","https://support.apple.com/en-us/HT213531","https://support.apple.com/en-us/HT213638","https://support.apple.com/en-us/HT213605","https://support.apple.com/en-us/HT213599"],"weaknesses":["CWE-94"],"ingestedAt":"2026-10-29T20:05:43.909Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/23xxx/CVE-2023-23496.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-23496","state":"PUBLISHED","datePublished":"2023-02-27T00:00:00.000Z","dateUpdated":"2025-03-11T13:55:41.336Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2023-01-12T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.2, watchOS 9.3, iOS 15.7.2 and iPadOS 15.7.2, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution."}],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16.3","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16.3","versionType":"custom"}]},{"vendor":"Apple","product":"Safari","versions":[{"version":"unspecified","status":"affected","lessThan":"16.3","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"unspecified","status":"affected","lessThan":"15.7","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"13.2","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"unspecified","status":"affected","lessThan":"9.3","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/HT213606"},{"url":"https://support.apple.com/en-us/HT213601"},{"url":"https://support.apple.com/en-us/HT213600"},{"url":"https://support.apple.com/en-us/HT213531"},{"url":"https://support.apple.com/en-us/HT213638"},{"url":"https://support.apple.com/en-us/HT213605"},{"url":"https://support.apple.com/en-us/HT213599"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"Processing maliciously crafted web content may lead to arbitrary code execution"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2023-07-27T03:47:22.823Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.apple.com/en-us/HT213606","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213601","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213600","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213531","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213638","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213605","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213599","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T10:35:32.179Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-03-11T13:55:08.104625Z","id":"CVE-2023-23496","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-94","type":"CWE","lang":"en","description":"CWE-94 Improper Control of Generation of Code ('Code Injection')"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-03-11T13:55:41.336Z"}}]}}}