Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2023-08-03. Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
The patch mitigates zero-day WebKit flaw CVE-2023-37450, which could permit arbitrary code execution via malicious web content. https://wayr.today/apple-releases-background-security-update-to-address-safari-vulnerability/
Post summary
Apple released a patch addressing CVE-2023-37450, a zero‑day WebKit flaw that could enable arbitrary code execution through malicious web content.
7 of 7 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | ipados | - | - | - |
| OS | apple | iphone_os | - | - | - |
| OS | apple | macos | - | - | - |
| App | apple | safari | - | - | - |
| OS | apple | tvos | - | - | - |
| OS | apple | watchos | - | - | - |
| App | webkitgtk | webkitgtk\+ | - | - | - |