CVE-2023-35074

高危 8.8CVE-2023-35074 · Published 27/09/2023 · updated 17/06/2026

要点

CVE-2023-35074 是影响 safari (apple) 的高危 (CVSS 8.8)漏洞。
未来 30 天内被利用的概率（EPSS）：1.6%，高于 75.6% 的漏洞。
修复：升级到 17.0 或更高版本。

Package	Affected versions	Patched versions
safari apple	`< 17.0`	`17.0`

Description

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.

References

seclists.org/fulldisclosure/2023/Oct/10 · Mailing List
seclists.org/fulldisclosure/2023/Oct/2 · Mailing List
seclists.org/fulldisclosure/2023/Oct/3 · Mailing List
seclists.org/fulldisclosure/2023/Oct/8 · Mailing List
seclists.org/fulldisclosure/2023/Oct/9 · Mailing List
openwall.com/lists/oss-security/2023/09/28/3 · Mailing List
lists.fedoraproject.org/archives/list/[email protected]/message/4EEMDC5TQAANFH5D77QM34ZTUKXPFGVL · Mailing List
security.gentoo.org/glsa/202401-33
support.apple.com/en-us/HT213936 · Release Notes
support.apple.com/en-us/HT213937 · Release Notes
support.apple.com/en-us/HT213938 · Release Notes
support.apple.com/en-us/HT213940 · Release Notes
support.apple.com/en-us/HT213941 · Release Notes
webkitgtk.org/security/WSA-2023-0009.html

safari 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free