{"id":"CVE-2023-23517","state":"PUBLISHED","title":"The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, Safari 16.3, tvOS 16.3, ","description":"The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution.","publishedAt":"2023-02-27T00:00:00.000Z","updatedAt":"2025-03-11T15:34:55.726Z","severity":{"score":8.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"apple","products":["Apple iOS and iPadOS","Apple tvOS","Apple Safari","Apple macOS","Apple watchOS"],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16.3","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16.3","versionType":"custom"}]},{"vendor":"Apple","product":"Safari","versions":[{"version":"unspecified","status":"affected","lessThan":"16.3","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"11.7","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"13.2","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"12.6","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"unspecified","status":"affected","lessThan":"9.3","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/HT213606","https://support.apple.com/en-us/HT213601","https://support.apple.com/en-us/HT213600","https://support.apple.com/en-us/HT213603","https://support.apple.com/en-us/HT213638","https://support.apple.com/en-us/HT213605","https://support.apple.com/en-us/HT213604","https://support.apple.com/en-us/HT213599"],"weaknesses":["CWE-119"],"ingestedAt":"2026-10-29T20:05:43.909Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/23xxx/CVE-2023-23517.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-23517","state":"PUBLISHED","datePublished":"2023-02-27T00:00:00.000Z","dateUpdated":"2025-03-11T15:34:55.726Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2023-01-12T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution."}],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16.3","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16.3","versionType":"custom"}]},{"vendor":"Apple","product":"Safari","versions":[{"version":"unspecified","status":"affected","lessThan":"16.3","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"11.7","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"13.2","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"12.6","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"unspecified","status":"affected","lessThan":"9.3","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/HT213606"},{"url":"https://support.apple.com/en-us/HT213601"},{"url":"https://support.apple.com/en-us/HT213600"},{"url":"https://support.apple.com/en-us/HT213603"},{"url":"https://support.apple.com/en-us/HT213638"},{"url":"https://support.apple.com/en-us/HT213605"},{"url":"https://support.apple.com/en-us/HT213604"},{"url":"https://support.apple.com/en-us/HT213599"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"Processing maliciously crafted web content may lead to arbitrary code execution"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2023-07-27T03:46:19.142Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.apple.com/en-us/HT213606","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213601","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213600","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213603","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213638","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213605","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213604","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213599","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T10:35:32.837Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-03-11T15:34:25.623781Z","id":"CVE-2023-23517","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-119","type":"CWE","lang":"en","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-03-11T15:34:55.726Z"}}]}}}