High severity8.8CISA KEVNVD Advisory· Published Sep 21, 2023· Updated Jun 17, 2026

CVE-2023-41993

Description

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

110

NetApp/Active Iq Unified Manager2 versions
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*+ 1 more
- cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*
- cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*
NetApp/Cloud Insights Acquisition Unit
cpe:2.3:a:netapp:cloud_insights_acquisition_unit:-:*:*:*:*:*:*:*
NetApp/Cloud Insights Storage Workload Security Agent
cpe:2.3:a:netapp:cloud_insights_storage_workload_security_agent:-:*:*:*:*:*:*:*
NetApp/Oncommand Insight
cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*
NetApp/Oncommand Workflow Automation
cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*
Oracle Corporation/Graalvm For Jdk2 versions
cpe:2.3:a:oracle:graalvm:20.3.13:*:*:*:enterprise:*:*:*+ 1 more
- cpe:2.3:a:oracle:graalvm:20.3.13:*:*:*:enterprise:*:*:*
- cpe:2.3:a:oracle:graalvm:21.3.9:*:*:*:enterprise:*:*:*
Oracle Corporation/Jdk
cpe:2.3:a:oracle:jdk:1.8.0:update401:*:*:*:*:*:*
Oracle Corporation/Jre
cpe:2.3:a:oracle:jre:1.8.0:update401:*:*:*:*:*:*
Webkitgtk/Webkitgtk
cpe:2.3:a:webkitgtk:webkitgtk\+:*:*:*:*:*:*:*:*
Range: <2.42.2
Apple Inc./Ipados
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Range: <17.0.1
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <17.0.1
Apple Inc./macOS2 versions
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: <14.0
- (no CPE)range: unspecified
Debian/linux2 versions
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*
Fedoraproject/Fedora3 versions
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
Apple Inc./macOS Sonomallm-fuzzy
Range: <14
Apple Inc./iOSllm-fuzzy
Range: <16.7
osv-coords88 versions
pkg:apk/chainguard/openjdk-11-openj9 pkg:apk/chainguard/openjdk-11-openj9-dbg pkg:apk/chainguard/openjdk-11-openj9-default-jdk pkg:apk/chainguard/openjdk-11-openj9-default-jvm pkg:apk/chainguard/openjdk-11-openj9-default-policy pkg:apk/chainguard/openjdk-11-openj9-doc pkg:apk/chainguard/openjdk-11-openj9-jmods pkg:apk/chainguard/openjdk-11-openj9-jre pkg:apk/chainguard/openjdk-17-openj9 pkg:apk/chainguard/openjdk-17-openj9-dbg pkg:apk/chainguard/openjdk-17-openj9-default-jdk pkg:apk/chainguard/openjdk-17-openj9-default-jvm pkg:apk/chainguard/openjdk-17-openj9-default-policy pkg:apk/chainguard/openjdk-17-openj9-doc pkg:apk/chainguard/openjdk-17-openj9-jmods pkg:apk/chainguard/openjdk-17-openj9-jre pkg:apk/chainguard/openjdk-21-openj9 pkg:apk/chainguard/openjdk-21-openj9-dbg pkg:apk/chainguard/openjdk-21-openj9-default-jdk pkg:apk/chainguard/openjdk-21-openj9-default-jvm pkg:apk/chainguard/openjdk-21-openj9-default-policy pkg:apk/chainguard/openjdk-21-openj9-doc pkg:apk/chainguard/openjdk-21-openj9-jmods pkg:apk/chainguard/openjdk-21-openj9-jre pkg:apk/chainguard/openjdk-25-openj9 pkg:apk/chainguard/openjdk-25-openj9-dbg pkg:apk/chainguard/openjdk-25-openj9-default-jdk pkg:apk/chainguard/openjdk-25-openj9-default-jvm pkg:apk/chainguard/openjdk-25-openj9-jmods pkg:apk/chainguard/openjdk-25-openj9-jre pkg:apk/chainguard/openjdk-26-openj9 pkg:apk/chainguard/openjdk-26-openj9-dbg pkg:apk/chainguard/openjdk-26-openj9-default-jdk pkg:apk/chainguard/openjdk-26-openj9-default-jvm pkg:apk/chainguard/openjdk-26-openj9-jre pkg:apk/chainguard/openjdk-8 pkg:apk/chainguard/openjdk-8-dbg pkg:apk/chainguard/openjdk-8-default-jdk pkg:apk/chainguard/openjdk-8-default-jvm pkg:apk/chainguard/openjdk-8-demos pkg:apk/chainguard/openjdk-8-doc pkg:apk/chainguard/openjdk-8-jre pkg:apk/chainguard/openjdk-8-openj9 pkg:apk/chainguard/openjdk-8-openj9-dbg pkg:apk/chainguard/openjdk-8-openj9-default-jdk pkg:apk/chainguard/openjdk-8-openj9-default-jvm pkg:apk/chainguard/openjdk-8-openj9-doc pkg:apk/chainguard/openjdk-8-openj9-jre pkg:apk/wolfi/openjdk-8 pkg:apk/wolfi/openjdk-8-dbg pkg:apk/wolfi/openjdk-8-default-jdk pkg:apk/wolfi/openjdk-8-default-jvm pkg:apk/wolfi/openjdk-8-demos pkg:apk/wolfi/openjdk-8-doc pkg:apk/wolfi/openjdk-8-jre pkg:bitnami/java pkg:bitnami/java-min pkg:bitnami/jre pkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/webkit2gtk3-soup2&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/webkit2gtk3-soup2&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/webkit2gtk4&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/webkit2gtk4&distro=openSUSE%20Leap%2015.5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Manager%20Proxy%204.2 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Manager%20Server%204.2 pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5 pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4 pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP5
< 0.53.0-r0+ 87 more
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.48.0-r2
- (no CPE)range: < 0.48.0-r2
- (no CPE)range: < 0.48.0-r2
- (no CPE)range: < 0.48.0-r2
- (no CPE)range: < 0.48.0-r2
- (no CPE)range: < 0.48.0-r2
- (no CPE)range: < 0.48.0-r2
- (no CPE)range: < 0.48.0-r2
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 8.412.08-r0
- (no CPE)range: < 8.482-r8
- (no CPE)range: < 8.412.08-r0
- (no CPE)range: < 8.412.08-r0
- (no CPE)range: < 8.412.08-r0
- (no CPE)range: < 8.482-r8
- (no CPE)range: < 8.412.08-r0
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 8.412.08-r0
- (no CPE)range: < 8.482-r8
- (no CPE)range: < 8.412.08-r0
- (no CPE)range: < 8.412.08-r0
- (no CPE)range: < 8.412.08-r0
- (no CPE)range: < 8.482-r8
- (no CPE)range: < 8.412.08-r0
- (no CPE)range: < 1.8.0
- (no CPE)range: < 1.8.0
- (no CPE)range: < 1.8.0
- (no CPE)range: < 2.42.1-150400.4.57.2
- (no CPE)range: < 2.42.1-150400.4.57.2
- (no CPE)range: < 2.42.1-150400.4.57.2
- (no CPE)range: < 2.42.1-150400.4.57.2
- (no CPE)range: < 2.42.1-150400.4.57.3
- (no CPE)range: < 2.42.1-150400.4.57.3
- (no CPE)range: < 2.42.1-150200.87.4
- (no CPE)range: < 2.42.1-150200.87.4
- (no CPE)range: < 2.42.1-150000.3.153.1
- (no CPE)range: < 2.42.1-150200.87.4
- (no CPE)range: < 2.42.1-150200.87.4
- (no CPE)range: < 2.42.1-150200.87.4
- (no CPE)range: < 2.42.1-150400.4.57.2
- (no CPE)range: < 2.42.1-150400.4.57.2
- (no CPE)range: < 2.42.1-2.155.1
- (no CPE)range: < 2.42.1-150000.3.153.1
- (no CPE)range: < 2.42.1-150200.87.4
- (no CPE)range: < 2.42.1-150200.87.4
- (no CPE)range: < 2.42.1-2.155.1
- (no CPE)range: < 2.42.1-150000.3.153.1
- (no CPE)range: < 2.42.1-150200.87.4
- (no CPE)range: < 2.42.1-150200.87.4
- (no CPE)range: < 2.42.1-2.155.1
- (no CPE)range: < 2.42.1-2.155.1
- (no CPE)range: < 2.42.1-150200.87.4
- (no CPE)range: < 2.42.1-150200.87.4
- (no CPE)range: < 2.42.1-150400.4.57.2
- (no CPE)range: < 2.42.1-150400.4.57.2
- (no CPE)range: < 2.42.1-150400.4.57.3
- (no CPE)range: < 2.42.1-150400.4.57.3

Patches

Vulnerability mechanics

References

security.gentoo.org/glsa/202401-33nvdThird Party Advisory
security.netapp.com/advisory/ntap-20240426-0004/nvdThird Party Advisory
support.apple.com/en-us/HT213940nvdVendor Advisory
support.apple.com/kb/HT213926nvdVendor Advisory
support.apple.com/kb/HT213930nvdVendor Advisory
webkitgtk.org/security/WSA-2023-0009.htmlnvdThird Party Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.023
exploit	0.000
kev	0.120
patch	0.000
ransomware	0.000