Search for vulnerabilities
Vulnerability details: VCID-xy68-rca3-aaaa
Vulnerability ID VCID-xy68-rca3-aaaa
Aliases CVE-2023-35074
Summary The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.
Status Published
Exploitability 0.5
Weighted Severity 7.9
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
cvssv3 8.8 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-35074.json
epss 0.00222 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00222 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00238 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00251 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00251 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00251 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00251 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00251 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00251 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00251 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00251 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00251 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00251 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00251 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00251 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.00598 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.02496 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.02496 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.02496 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.02496 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.02496 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.02496 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.02496 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.02496 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.02496 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.02496 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.02496 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.02496 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.02496 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.02496 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
epss 0.06489 https://api.first.org/data/v1/epss?cve=CVE-2023-35074
cvssv3.1 8.8 http://seclists.org/fulldisclosure/2023/Oct/10
ssvc Track http://seclists.org/fulldisclosure/2023/Oct/10
cvssv3.1 8.8 http://seclists.org/fulldisclosure/2023/Oct/2
ssvc Track http://seclists.org/fulldisclosure/2023/Oct/2
cvssv3.1 8.8 http://seclists.org/fulldisclosure/2023/Oct/3
ssvc Track http://seclists.org/fulldisclosure/2023/Oct/3
cvssv3.1 8.8 http://seclists.org/fulldisclosure/2023/Oct/8
ssvc Track http://seclists.org/fulldisclosure/2023/Oct/8
cvssv3.1 8.8 http://seclists.org/fulldisclosure/2023/Oct/9
ssvc Track http://seclists.org/fulldisclosure/2023/Oct/9
cvssv3.1 8.8 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1 8.8 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EEMDC5TQAANFH5D77QM34ZTUKXPFGVL/
ssvc Track https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EEMDC5TQAANFH5D77QM34ZTUKXPFGVL/
cvssv3 8.8 https://nvd.nist.gov/vuln/detail/CVE-2023-35074
cvssv3.1 8.8 https://nvd.nist.gov/vuln/detail/CVE-2023-35074
cvssv3.1 8.8 https://security.gentoo.org/glsa/202401-33
ssvc Track https://security.gentoo.org/glsa/202401-33
cvssv3.1 8.8 https://support.apple.com/en-us/HT213936
ssvc Track https://support.apple.com/en-us/HT213936
cvssv3.1 8.8 https://support.apple.com/en-us/HT213937
ssvc Track https://support.apple.com/en-us/HT213937
cvssv3.1 8.8 https://support.apple.com/en-us/HT213938
ssvc Track https://support.apple.com/en-us/HT213938
cvssv3.1 8.8 https://support.apple.com/en-us/HT213940
ssvc Track https://support.apple.com/en-us/HT213940
cvssv3.1 8.8 https://support.apple.com/en-us/HT213941
ssvc Track https://support.apple.com/en-us/HT213941
cvssv3.1 8.8 http://www.openwall.com/lists/oss-security/2023/09/28/3
ssvc Track http://www.openwall.com/lists/oss-security/2023/09/28/3
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-35074.json
https://api.first.org/data/v1/epss?cve=CVE-2023-35074
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0108
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32885
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27932
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27954
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28198
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28205
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32370
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32393
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32435
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-35074
http://seclists.org/fulldisclosure/2023/Oct/10
http://seclists.org/fulldisclosure/2023/Oct/2
http://seclists.org/fulldisclosure/2023/Oct/3
http://seclists.org/fulldisclosure/2023/Oct/8
http://seclists.org/fulldisclosure/2023/Oct/9
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EEMDC5TQAANFH5D77QM34ZTUKXPFGVL/
https://support.apple.com/en-us/HT213936
https://support.apple.com/en-us/HT213937
https://support.apple.com/en-us/HT213938
https://support.apple.com/en-us/HT213940
https://support.apple.com/en-us/HT213941
https://webkitgtk.org/security/WSA-2023-0009.html
http://www.openwall.com/lists/oss-security/2023/09/28/3
2241403 https://bugzilla.redhat.com/show_bug.cgi?id=2241403
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
CVE-2023-35074 https://nvd.nist.gov/vuln/detail/CVE-2023-35074
GLSA-202401-33 https://security.gentoo.org/glsa/202401-33
RHSA-2023:4201 https://access.redhat.com/errata/RHSA-2023:4201
RHSA-2023:4202 https://access.redhat.com/errata/RHSA-2023:4202
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-35074.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://seclists.org/fulldisclosure/2023/Oct/10
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:26:54Z/ Found at http://seclists.org/fulldisclosure/2023/Oct/10
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://seclists.org/fulldisclosure/2023/Oct/2
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:26:54Z/ Found at http://seclists.org/fulldisclosure/2023/Oct/2
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://seclists.org/fulldisclosure/2023/Oct/3
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:26:54Z/ Found at http://seclists.org/fulldisclosure/2023/Oct/3
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://seclists.org/fulldisclosure/2023/Oct/8
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:26:54Z/ Found at http://seclists.org/fulldisclosure/2023/Oct/8
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://seclists.org/fulldisclosure/2023/Oct/9
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:26:54Z/ Found at http://seclists.org/fulldisclosure/2023/Oct/9
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EEMDC5TQAANFH5D77QM34ZTUKXPFGVL/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:26:54Z/ Found at https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EEMDC5TQAANFH5D77QM34ZTUKXPFGVL/
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2023-35074
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2023-35074
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://security.gentoo.org/glsa/202401-33
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:26:54Z/ Found at https://security.gentoo.org/glsa/202401-33
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://support.apple.com/en-us/HT213936
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:26:54Z/ Found at https://support.apple.com/en-us/HT213936
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://support.apple.com/en-us/HT213937
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:26:54Z/ Found at https://support.apple.com/en-us/HT213937
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://support.apple.com/en-us/HT213938
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:26:54Z/ Found at https://support.apple.com/en-us/HT213938
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://support.apple.com/en-us/HT213940
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:26:54Z/ Found at https://support.apple.com/en-us/HT213940
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://support.apple.com/en-us/HT213941
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:26:54Z/ Found at https://support.apple.com/en-us/HT213941
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://www.openwall.com/lists/oss-security/2023/09/28/3
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:26:54Z/ Found at http://www.openwall.com/lists/oss-security/2023/09/28/3
Exploit Prediction Scoring System (EPSS)
Percentile 0.60015
EPSS Score 0.00222
Published At Dec. 17, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.