Vulnerabilities > CVE-2023-40451 - Unspecified vulnerability in Apple Safari

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

apple

NVD

Published: 2023-09-27

Updated: 2024-01-31

Summary

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 17. An attacker with JavaScript execution may be able to execute arbitrary code.

Vulnerable Configurations

Part	Description	Count
Application	Apple Apple Safari - Apple Safari 1.0 Apple Safari 1.0.0 Apple Safari 1.0.0B1 Apple Safari 1.0.0B2 Apple Safari 1.0.1 Apple Safari 1.0.2 Apple Safari 1.0.3 Apple Safari 1.0B1 Apple Safari 1.1 Apple Safari 1.1.0 Apple Safari 1.1.1 Apple Safari 1.2 Apple Safari 1.2.0 Apple Safari 1.2.1 Apple Safari 1.2.2 Apple Safari 1.2.3 Apple Safari 1.2.4 Apple Safari 1.2.5 Apple Safari 1.3 Apple Safari 1.3.0 Apple Safari 1.3.1 Apple Safari 1.3.2 Apple Safari 2 Apple Safari 2.0 Apple Safari 2.0.0 Apple Safari 2.0.1 Apple Safari 2.0.2 Apple Safari 2.0.3 Apple Safari 2.0.4 Apple Safari 3 Apple Safari 3.0 Apple Safari 3.0.0 Apple Safari 3.0.0B Apple Safari 3.0.1 Apple Safari 3.0.1B Apple Safari 3.0.2 Apple Safari 3.0.2B Apple Safari 3.0.3 Apple Safari 3.0.3B Apple Safari 3.0.4 Apple Safari 3.0.4B Apple Safari 3.0.5 Apple Safari 3.1.0 Apple Safari 3.1.0B Apple Safari 3.1.1 Apple Safari 3.1.1B Apple Safari 3.1.2 Apple Safari 3.1.2B Apple Safari 3.2.0 Apple Safari 3.2.0B Apple Safari 3.2.1 Apple Safari 3.2.1B Apple Safari 3.2.2 Apple Safari 3.2.2B Apple Safari 4.0 Apple Safari 4.0.0B Apple Safari 4.0.1 Apple Safari 4.0.2 Apple Safari 4.0.3 Apple Safari 4.0.4 Apple Safari 4.0.5 Apple Safari 4.1 Apple Safari 4.1.1 Apple Safari 4.1.2 Apple Safari 4.1.3 Apple Safari 5.0 Apple Safari 5.0.1 Apple Safari 5.0.2 Apple Safari 5.0.3 Apple Safari 5.0.4 Apple Safari 5.0.5 Apple Safari 5.0.6 Apple Safari 5.1 Apple Safari 5.1.1 Apple Safari 5.1.2 Apple Safari 5.1.3 Apple Safari 5.1.4 Apple Safari 5.1.5 Apple Safari 5.1.6 Apple Safari 5.1.7 Apple Safari 6.0 Apple Safari 6.0.1 Apple Safari 6.0.2 Apple Safari 6.0.3 Apple Safari 6.0.4 Apple Safari 6.0.5 Apple Safari 6.1 Apple Safari 6.1.1 Apple Safari 6.1.2 Apple Safari 6.1.3 Apple Safari 6.1.4 Apple Safari 6.1.5 Apple Safari 6.2.1 Apple Safari 6.2.4 Apple Safari 6.2.5 Apple Safari 6.2.6 Apple Safari 6.2.8 Apple Safari 7.0 Apple Safari 7.0.1 Apple Safari 7.0.2 Apple Safari 7.0.3 Apple Safari 7.0.4 Apple Safari 7.0.5 Apple Safari 7.1 Apple Safari 7.1.1 Apple Safari 7.1.4 Apple Safari 7.1.5 Apple Safari 7.1.6 Apple Safari 7.1.8 Apple Safari 8.0 Apple Safari 8.0.1 Apple Safari 8.0.4 Apple Safari 8.0.5 Apple Safari 8.0.6 Apple Safari 8.0.8 Apple Safari 9.0.1 Apple Safari 9.0.2 Apple Safari 9.0.3 Apple Safari 9.1 Apple Safari 9.1.1 Apple Safari 9.1.3 Apple Safari 10.0.0 Apple Safari 10.0.1 Apple Safari 10.0.2 Apple Safari 10.0.3 Apple Safari 10.1 Apple Safari 10.1.1 Apple Safari 10.1.2 Apple Safari 11.0 Apple Safari 11.0.1 Apple Safari 11.0.2 Apple Safari 11.0.3 Apple Safari 11.1 Apple Safari 11.1.1 Apple Safari 11.1.2 Apple Safari 12 Apple Safari 12.0 Apple Safari 12.0.1 Apple Safari 12.0.2 Apple Safari 12.0.3 Apple Safari 12.1 Apple Safari 12.1.1 Apple Safari 12.1.2 Apple Safari 13 Apple Safari 13.0.1 Apple Safari 13.0.3 Apple Safari 13.0.4 Apple Safari 13.0.5 Apple Safari 13.1 Apple Safari 13.1.1 Apple Safari 13.1.2 Apple Safari 14.0 Apple Safari 14.0.1 Apple Safari 14.0.2 Apple Safari 14.0.3 Apple Safari 14.1 Apple Safari 14.1.1 Apple Safari 14.1.2 Apple Safari 15.0.0 Apple Safari 15.4 Apple Safari 15.6 Apple Safari 15.6.1 Apple Safari 16.0 Apple Safari 16.1 Apple Safari 16.2 Apple Safari 16.3 Apple Safari 16.4 Apple Safari 16.4.1 Apple Safari 16.5 Apple Safari 16.5.2 Apple Safari 16.6 Apple Safari 16.6.1	198

Summary

Vulnerable Configurations

References