Apple Multiple Products WebKit Code Execution Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 25/09/2023. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| graalvm | = 20.3.13= 21.3.9 | |
| jdk | = 1.8.0 | |
| jre | = 1.8.0 | |
| webkitgtk+ | < 2.42.2 | 2.42.2 |
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free