{"id":"CVE-2023-41993","kind":"vulnerability","aliases":["CVE-2023-41993"],"related":[],"title":"The issue was addressed with improved checks","description":"Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.\n\nCISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","summary":"Apple's WebKit browser engine, used by iOS, iPadOS, macOS and Safari, has a flaw in how it processes HTML. A malicious web page can run code on the device when it is opened.","severity":"high","cvss":8.8,"epss":null,"exploited":true,"exploited_at":"2023-09-25T00:00:00+00:00","products":[{"name":"Apple Multiple Products","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"apple ipados","fixed":["17.0.1"],"affected":"< 17.0.1","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["17.0.1"],"affected":"< 17.0.1","ecosystem":"vendor"},{"name":"apple macos","fixed":["14.0"],"affected":"< 14.0","ecosystem":"vendor"},{"name":"fedoraproject fedora","fixed":[],"affected":"= 37","ecosystem":"vendor"},{"name":"fedoraproject fedora","fixed":[],"affected":"= 38","ecosystem":"vendor"},{"name":"fedoraproject fedora","fixed":[],"affected":"= 39","ecosystem":"vendor"},{"name":"debian linux","fixed":[],"affected":"= 11.0","ecosystem":"vendor"},{"name":"debian linux","fixed":[],"affected":"= 12.0","ecosystem":"vendor"},{"name":"oracle graalvm","fixed":[],"affected":"= 20.3.13","ecosystem":"vendor"},{"name":"oracle graalvm","fixed":[],"affected":"= 21.3.9","ecosystem":"vendor"},{"name":"oracle jdk","fixed":[],"affected":"= 1.8.0","ecosystem":"vendor"},{"name":"oracle jre","fixed":[],"affected":"= 1.8.0","ecosystem":"vendor"},{"name":"netapp active iq unified manager","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"netapp cloud insights acquisition unit","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"netapp cloud insights storage workload security agent","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"netapp oncommand insight","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"netapp oncommand workflow automation","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"webkitgtk webkitgtk\\+","fixed":["2.42.2"],"affected":"< 2.42.2","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","ios","ipados","macos","safari","vendor","webkit"],"not_affected_if":["unpatched-os-versions-only"],"how_to_check":null,"fix":"Update iOS, iPadOS, macOS and Safari to the vendor-fixed releases per Apple's security notes; the sources do not list exact versions.\nCISA directs federal agencies to apply vendor mitigations or stop using the product if none exist.","status":"open","published_at":"2023-09-21T19:15:11+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T21:04:33+00:00","updated_at":"2026-10-23T22:29:04+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-23T21:04:33Z","model":"claude-haiku-5-5","output":{"fix":"Update iOS, iPadOS, macOS and Safari to the vendor-fixed releases per Apple's security notes; the sources do not list exact versions.\nCISA directs federal agencies to apply vendor mitigations or stop using the product if none exist.","reach":"internet","impact":"high","summary":"Apple's WebKit browser engine, used by iOS, iPadOS, macOS and Safari, has a flaw in how it processes HTML. A malicious web page can run code on the device when it is opened.","category":"vendor","who_cares":["ios","ipados","macos","safari","webkit"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker runs code on the device via a crafted web page.","analyst_note":"Find Apple's security advisory for CVE-2023-41993 to get the fixed iOS, iPadOS, macOS and Safari versions and check whether it is listed as actively exploited.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unpatched-os-versions-only"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000485,"input_tokens":2876,"output_tokens":395,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2023':9A,12A '-41993':10A,13A 'acquisition':50A 'action':161C 'active':43A 'address':4A 'agent':58A 'appl':75B,109C,145C,150C 'apple':14A,17A,19A,22A 'appli':162C 'automation':65A 'browser':78B 'check':7A 'cisa':159C 'cloud':48A,53A 'code':101B,123C 'contain':116C 'content':130C 'could':133C 'craft':128C 'cve':8A,11A 'debian':30A,32A 'devic':104B 'discontinu':168C 'engin':79B 'execut':124C 'exploit':68B 'fedora':25A,27A,29A 'fedoraproject':24A,26A,28A 'flaw':89B 'graalvm':35A,37A 'html':94B,135C,157C 'impact':134C 'improv':6A 'includ':140C 'insight':61A 'insights':49A,54A 'instruct':166C 'io':69B,82B,110C 'ipado':70B,83B,111C 'ipados':18A 'iphone':20A 'iq':44A 'issu':2A 'jdk':39A 'jre':41A 'lead':121C 'limit':143C 'linux':31A,33A 'maco':71B,84B,112C 'macos':23A 'malici':96B,127C 'manager':46A 'mitig':163C,174C 'multiple':15A 'netapp':42A,47A,52A,59A,62A 'non':149C 'non-appl':148C 'oncommand':60A,63A 'open':108B 'oracle':34A,36A,38A,40A 'os':21A 'page':98B 'parser':136C 'per':164C 'process':93B,126C,158C 'product':151C,172C 'products':16A 'reli':153C 'requir':160C 'run':100B 'safari':72B,86B,114C,146C 'security':57A 'storage':55A 'unavail':176C 'unified':45A 'unit':51A 'unspecifi':118C 'use':80B,138C,169C 'vendor':73B,165C 'vulner':119C,132C 'web':97B,129C 'webkit':74B,77B,115C,139C,155C 'webkitgtk':66A,67A 'workflow':64A 'workload':56A","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2023-09-21T19:15:11+00:00","kev":{"dateAdded":"2023-09-25","dueDate":"2023-10-16","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2023-41993","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41993","severity":null,"published_at":"2023-09-25T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T14:39:39+00:00","note":null},{"source":"nvd","external_id":"CVE-2023-41993","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41993","severity":null,"published_at":"2023-09-21T19:15:11+00:00","modified_at":"2026-06-17T06:23:13+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}