CVE-2023-41993

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

Affected

Apple · macOS

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

24.35% chance of exploitation in the next 30 days, 98th percentile

CISA KEV

added 2023-09-25

Published

2023-09-21

Updated

2025-11-04

Proof-of-concept exploits (7)

• 0x06060606/CVE-2023-419935★ · 2024-11-18
• Ibinou/Ty0★ · 2023-11-29
• J3Ss0u/CVE-2023-419930★ · 2024-02-28
• hrtowii/cve-2023-41993-test16★ · 2023-10-18
• po6ix/POC-for-CVE-2023-41993202★ · 2024-03-08
• F33DoT530i/QuantumTroll_Break1★ · 2025-12-26
• jamezx32/CVE-2023-41993

Security advisories

• https://support.apple.com/en-us/HT213940
• https://support.apple.com/kb/HT213926
• https://support.apple.com/kb/HT213930
• https://security.gentoo.org/glsa/202401-33
• https://security.netapp.com/advisory/ntap-20240426-0004
• https://webkitgtk.org/security/WSA-2023-0009.html

References

• CVE Record
• NVD entry

Related

• CVE-2024-23208
• CVE-2018-4125
• CVE-2019-0567
• CVE-2021-30517
• CVE-2021-38003
• CVE-2023-2033