High severity8.8NVD Advisory· Published Mar 28, 2024· Updated Jun 17, 2026

CVE-2023-42950

Description

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./tvOSllm-fuzzy2 versions
17.2+ 1 more
- (no CPE)range: 17.2
- (no CPE)range: unspecified
Apple Inc./macOSllm-fuzzy2 versions
Sonoma 14.2+ 1 more
- (no CPE)range: Sonoma 14.2
- (no CPE)range: unspecified
Apple Inc./Ipadosllm-fuzzy
Range: 17.2
Apple Inc./watchOSllm-fuzzy2 versions
10.2+ 1 more
- (no CPE)range: 10.2
- (no CPE)range: unspecified
Apple Inc./Safarillm-fuzzy2 versions
17.2+ 1 more
- (no CPE)range: 17.2
- (no CPE)range: unspecified
Apple Inc./iOSllm-fuzzy
Range: 17.2
osv-coords78 versions
pkg:apk/chainguard/openjdk-11-openj9 pkg:apk/chainguard/openjdk-11-openj9-dbg pkg:apk/chainguard/openjdk-11-openj9-default-jdk pkg:apk/chainguard/openjdk-11-openj9-default-jvm pkg:apk/chainguard/openjdk-11-openj9-default-policy pkg:apk/chainguard/openjdk-11-openj9-doc pkg:apk/chainguard/openjdk-11-openj9-jmods pkg:apk/chainguard/openjdk-11-openj9-jre pkg:apk/chainguard/openjdk-17-openj9 pkg:apk/chainguard/openjdk-17-openj9-dbg pkg:apk/chainguard/openjdk-17-openj9-default-jdk pkg:apk/chainguard/openjdk-17-openj9-default-jvm pkg:apk/chainguard/openjdk-17-openj9-default-policy pkg:apk/chainguard/openjdk-17-openj9-doc pkg:apk/chainguard/openjdk-17-openj9-jmods pkg:apk/chainguard/openjdk-17-openj9-jre pkg:apk/chainguard/openjdk-21-openj9 pkg:apk/chainguard/openjdk-21-openj9-dbg pkg:apk/chainguard/openjdk-21-openj9-default-jdk pkg:apk/chainguard/openjdk-21-openj9-default-jvm pkg:apk/chainguard/openjdk-21-openj9-default-policy pkg:apk/chainguard/openjdk-21-openj9-doc pkg:apk/chainguard/openjdk-21-openj9-jmods pkg:apk/chainguard/openjdk-21-openj9-jre pkg:apk/chainguard/openjdk-25-openj9-default-jvm pkg:apk/chainguard/openjdk-25-openj9-jmods pkg:apk/chainguard/openjdk-26-openj9-jre pkg:apk/chainguard/openjdk-8-openj9 pkg:apk/chainguard/openjdk-8-openj9-dbg pkg:apk/chainguard/openjdk-8-openj9-default-jdk pkg:apk/chainguard/openjdk-8-openj9-default-jvm pkg:apk/chainguard/openjdk-8-openj9-doc pkg:apk/chainguard/openjdk-8-openj9-jre pkg:bitnami/java pkg:bitnami/java-min pkg:bitnami/jre pkg:rpm/almalinux/webkit2gtk3 pkg:rpm/almalinux/webkit2gtk3-devel pkg:rpm/almalinux/webkit2gtk3-jsc pkg:rpm/almalinux/webkit2gtk3-jsc-devel pkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/webkit2gtk3-soup2&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/webkit2gtk3-soup2&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/webkit2gtk4&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/webkit2gtk4&distro=openSUSE%20Leap%2015.6 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP6 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5 pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5 pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Manager%20Proxy%204.3 pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Manager%20Server%204.3 pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP5 pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP6 pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4
< 0.53.0-r0+ 77 more
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.53.0-r0
- (no CPE)range: < 0.48.0-r2
- (no CPE)range: < 0.48.0-r2
- (no CPE)range: < 0.48.0-r2
- (no CPE)range: < 0.48.0-r2
- (no CPE)range: < 0.48.0-r2
- (no CPE)range: < 0.48.0-r2
- (no CPE)range: < 0.48.0-r2
- (no CPE)range: < 0.48.0-r2
- (no CPE)range: < 0.59.0-r1
- (no CPE)range: < 0.59.0-r1
- (no CPE)range: < 0.59.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 0.53.0-r1
- (no CPE)range: < 1.8.0
- (no CPE)range: < 1.8.0
- (no CPE)range: < 1.8.0
- (no CPE)range: < 2.44.3-2.el9
- (no CPE)range: < 2.44.3-2.el9
- (no CPE)range: < 2.44.3-2.el9
- (no CPE)range: < 2.44.3-2.el9
- (no CPE)range: < 2.44.0-150400.4.78.1
- (no CPE)range: < 2.44.2-150600.12.3.1
- (no CPE)range: < 2.44.0-150400.4.78.1
- (no CPE)range: < 2.44.2-150600.12.3.1
- (no CPE)range: < 2.44.0-150400.4.78.1
- (no CPE)range: < 2.44.2-150600.12.3.1
- (no CPE)range: < 2.44.0-150200.107.1
- (no CPE)range: < 2.44.0-150200.107.1
- (no CPE)range: < 2.44.0-150200.107.1
- (no CPE)range: < 2.44.0-150400.4.78.1
- (no CPE)range: < 2.44.0-150400.4.78.1
- (no CPE)range: < 2.44.0-150400.4.78.1
- (no CPE)range: < 2.44.2-150600.12.3.1
- (no CPE)range: < 2.44.0-4.3.2
- (no CPE)range: < 2.44.0-150200.107.1
- (no CPE)range: < 2.44.0-150200.107.1
- (no CPE)range: < 2.44.0-150400.4.78.1
- (no CPE)range: < 2.44.0-4.3.2
- (no CPE)range: < 2.44.0-150200.107.1
- (no CPE)range: < 2.44.0-150200.107.1
- (no CPE)range: < 2.44.0-150400.4.78.1
- (no CPE)range: < 2.44.0-4.3.2
- (no CPE)range: < 2.44.0-4.3.2
- (no CPE)range: < 2.44.0-150400.4.78.1
- (no CPE)range: < 2.44.0-150400.4.78.1
- (no CPE)range: < 2.44.0-150400.4.78.1
- (no CPE)range: < 2.44.2-150600.12.3.1
- (no CPE)range: < 2.44.0-150400.4.78.1
- (no CPE)range: < 2.44.0-150400.4.78.1
- (no CPE)range: < 2.44.0-150400.4.78.1
- (no CPE)range: < 2.44.0-150400.4.78.1
- (no CPE)range: < 2.44.0-150400.4.78.1
- (no CPE)range: < 2.44.0-150400.4.78.1
- (no CPE)range: < 2.44.2-150600.12.3.1
- (no CPE)range: < 2.44.0-150400.4.78.1
- (no CPE)range: < 2.44.2-150600.12.3.1
- (no CPE)range: < 2.44.0-150400.4.78.1
- (no CPE)range: < 2.44.0-150400.4.78.1
Apple Inc./iOS and iPadOScpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

support.apple.com/en-us/HT214035nvdRelease NotesVendor Advisory
support.apple.com/en-us/HT214036nvdRelease NotesVendor Advisory
support.apple.com/en-us/HT214039nvdRelease NotesVendor Advisory
support.apple.com/en-us/HT214040nvdRelease NotesVendor Advisory
support.apple.com/en-us/HT214041nvdRelease NotesVendor Advisory
www.openwall.com/lists/oss-security/2024/03/26/1nvd
lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IXLXIOAH5S7J22LJTCIAVFVVJ4TESAX4/nvd
security.netapp.com/advisory/ntap-20241018-0009/nvd
support.apple.com/kb/HT214039nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000