CVE-2023-41993

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 8.8EPSS 24%

Published 2023-09-21Updated 2026-10-15

Exploited in the wildMedia 26465PoC

Vulnerability details

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CNAapple

EPSS score history

Sources

12 links

PoC links are not available for guest users. Login to view them.

CISA Known Exploited CVEShield The Hacker News Bleeping Computer Bleeping Computer Bleeping Computer Bleeping Computer Bleeping Computer The Hacker News Dark Reading Dark Reading CVE Organization

Profile

CVSS

8.8

EPSS

24%

Published

2023-09-21

Updated

2026-10-15

CNA

apple

Vendors

Apple

1 product

CPEs

cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*

cpe:2.3:o:apple:ipad_os:-:*:*:*:*:*:*:*

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:graalvm:21.3.9:*:*:*:*:*:*:*

cpe:2.3:a:oracle:jdk:1.8.0:-:*:*:*:*:*:*

cpe:2.3:a:oracle:jre:1.8.0:*:*:*:*:*:*:*

cpe:2.3:a:netapp:cloud_insights_acquisition_unit:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:cloud_insights_storage_workload_security_agent:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated