CVE-2023-40451 — Apple / Safari

Description (CNA)

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 17. An attacker with JavaScript execution may be able to execute arbitrary code.

Affected (CNA)

Vendor / product	Versions
Apple / Safari	affected unspecified before 17

CWE

No CWE identifiers supplied.

References

https://support.apple.com/en-us/HT213941
http://www.openwall.com/lists/oss-security/2023/09/28/3
http://seclists.org/fulldisclosure/2023/Oct/2
https://security.gentoo.org/glsa/202401-33

ADP enrichment

CVE

No English description supplied.

https://support.apple.com/en-us/HT213941
http://www.openwall.com/lists/oss-security/2023/09/28/3
http://seclists.org/fulldisclosure/2023/Oct/2
https://security.gentoo.org/glsa/202401-33
https://webkitgtk.org/security/WSA-2023-0009.html

CISA-ADP

No English description supplied.

No references supplied.