CVE-2023-41993: Apple Multiple Products WebKit Code Execution Vulnerability

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: yes — in CISA KEV since 2023-09-25
EPSS: 24.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-09-21 · updated 2026-06-17
Weakness: CWE-754

Description

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

Affected products

Apple iPadOS: before 17.0.1 — fixed in 17.0.1
Apple Iphone Os: before 17.0.1 — fixed in 17.0.1
Apple macOS: before 14.0 — fixed in 14.0
Debian Linux: 11.0, 12.0
Fedoraproject Fedora: 37, 38, 39
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows: all versions
NetApp Cloud Insights Acquisition Unit: all versions
NetApp Cloud Insights Storage Workload Security Agent: all versions
OnCommand Insight: all versions
NetApp OnCommand Workflow Automation: all versions
Oracle Corporation GraalVM Enterprise Edition: 20.3.13, 21.3.9
Oracle Java SE: 1.8.0-update401
Oracle Java SE: 1.8.0-update401
Webkitgtk+: before 2.42.2 — fixed in 2.42.2

How to fix

Upgrade to a fixed version: Apple iPadOS 17.0.1; Apple Iphone Os 17.0.1; Apple macOS 14.0; Webkitgtk+ 2.42.2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-41993 or the next vulnerability affects your stack