UpHeron
All vulnerabilities

Servers and applications

CVE-2023-41993

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

Actively exploited: CISA added it to its Known Exploited Vulnerabilities catalog on 25 Sept 2023.

Severity
High 8.8
Published
21 Sept 2023
Last changed
17 Jun 2026
Added to UpHeron
22 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
JavaServers and applications · cpe:a:oracle:jdk
  • Version 1.8.0-update401
JavaServers and applications · cpe:a:oracle:jre
  • Version 1.8.0-update401

Known exploited

CISA name
Apple Multiple Products WebKit Code Execution Vulnerability
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due for US agencies
16 Oct 2023
Used in ransomware
Not known

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-41993
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-41993