---
id: "CVE-2023-41993"
kind: "vulnerability"
aliases: ["CVE-2023-41993"]
title: "The issue was addressed with improved checks"
severity: "high"
cvss: 8.8
epss: null
exploited: true
status: "open"
category: "vendor"
products: [{"name": "Apple Multiple Products", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "apple ipados", "fixed": ["17.0.1"], "affected": "< 17.0.1", "ecosystem": "vendor"}, {"name": "apple iphone os", "fixed": ["17.0.1"], "affected": "< 17.0.1", "ecosystem": "vendor"}, {"name": "apple macos", "fixed": ["14.0"], "affected": "< 14.0", "ecosystem": "vendor"}, {"name": "fedoraproject fedora", "fixed": [], "affected": "= 37", "ecosystem": "vendor"}, {"name": "fedoraproject fedora", "fixed": [], "affected": "= 38", "ecosystem": "vendor"}, {"name": "fedoraproject fedora", "fixed": [], "affected": "= 39", "ecosystem": "vendor"}, {"name": "debian linux", "fixed": [], "affected": "= 11.0", "ecosystem": "vendor"}, {"name": "debian linux", "fixed": [], "affected": "= 12.0", "ecosystem": "vendor"}, {"name": "oracle graalvm", "fixed": [], "affected": "= 20.3.13", "ecosystem": "vendor"}, {"name": "oracle graalvm", "fixed": [], "affected": "= 21.3.9", "ecosystem": "vendor"}, {"name": "oracle jdk", "fixed": [], "affected": "= 1.8.0", "ecosystem": "vendor"}, {"name": "oracle jre", "fixed": [], "affected": "= 1.8.0", "ecosystem": "vendor"}, {"name": "netapp active iq unified manager", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "netapp cloud insights acquisition unit", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "netapp cloud insights storage workload security agent", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "netapp oncommand insight", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "netapp oncommand workflow automation", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "webkitgtk webkitgtk\\+", "fixed": ["2.42.2"], "affected": "< 2.42.2", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "ios", "ipados", "macos", "safari", "vendor", "webkit"]
not_affected_if: ["unpatched-os-versions-only"]
published_at: "2023-09-21T19:15:11+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T22:29:04+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41993", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41993", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# The issue was addressed with improved checks

Apple's WebKit browser engine, used by iOS, iPadOS, macOS and Safari, has a flaw in how it processes HTML. A malicious web page can run code on the device when it is opened.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Apple Multiple Products affected ? fixed ?
- vendor:apple ipados affected < 17.0.1 fixed 17.0.1
- vendor:apple iphone os affected < 17.0.1 fixed 17.0.1
- vendor:apple macos affected < 14.0 fixed 14.0
- vendor:fedoraproject fedora affected = 37 fixed ?
- vendor:fedoraproject fedora affected = 38 fixed ?
- vendor:fedoraproject fedora affected = 39 fixed ?
- vendor:debian linux affected = 11.0 fixed ?
- vendor:debian linux affected = 12.0 fixed ?
- vendor:oracle graalvm affected = 20.3.13 fixed ?
- vendor:oracle graalvm affected = 21.3.9 fixed ?
- vendor:oracle jdk affected = 1.8.0 fixed ?
- vendor:oracle jre affected = 1.8.0 fixed ?
- vendor:netapp active iq unified manager affected ? fixed ?
- vendor:netapp cloud insights acquisition unit affected ? fixed ?
- vendor:netapp cloud insights storage workload security agent affected ? fixed ?
- vendor:netapp oncommand insight affected ? fixed ?
- vendor:netapp oncommand workflow automation affected ? fixed ?
- vendor:webkitgtk webkitgtk\+ affected < 2.42.2 fixed 2.42.2

## Fix

Update iOS, iPadOS, macOS and Safari to the vendor-fixed releases per Apple's security notes; the sources do not list exact versions.
CISA directs federal agencies to apply vendor mitigations or stop using the product if none exist.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41993
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2023-41993

## From the sources

Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_