ByteOS

Product:Multiple Products

Added At:23 Jun, 2023

Due At:14 Jul, 2023

Apple Multiple Products WebKit Type Confusion Vulnerability

Used in Ransomware

Unknown

CWE

CWE-843

Required Action:

Apply updates per vendor instructions.

Additional Notes:

https://support.apple.com/en-us/HT213813, https://support.apple.com/en-us/HT213811, https://support.apple.com/en-us/HT213814, https://support.apple.com/en-us/HT213816; https://nvd.nist.gov/vuln/detail/CVE-2023-32439

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:apple

Assigner Org ID:286789f9-fbc2-4510-9f9a-43facdede74c

Published At:23 Jun, 2023 | 00:00

Updated At:30 Jul, 2025 | 01:37

▼CVE Numbering Authority (CNA)

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, Safari 16.5.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Affected Products

Vendor

Product

iOS and iPadOS

Versions

Affected

From unspecified before 15.7 (custom)

Vendor

Product

Safari

Versions

Affected

From unspecified before 16.5 (custom)

Vendor

Product

iOS and iPadOS

Versions

Affected

From unspecified before 16.5 (custom)

Vendor

Product

macOS

Versions

Affected

From unspecified before 13.4 (custom)

Problem Types

Type	CWE ID	Description
N/A	N/A	Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Type: N/A

CWE ID: N/A

Description: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

References

Hyperlink	Resource
https://support.apple.com/en-us/HT213811	N/A
https://support.apple.com/en-us/HT213816	N/A
https://support.apple.com/en-us/HT213814	N/A
https://support.apple.com/en-us/HT213813	N/A
https://support.apple.com/kb/HT213814	N/A
https://support.apple.com/kb/HT213816	N/A
https://security.gentoo.org/glsa/202401-04	N/A

Hyperlink: https://support.apple.com/en-us/HT213811

Resource: N/A

Hyperlink: https://support.apple.com/en-us/HT213816

Resource: N/A

Hyperlink: https://support.apple.com/en-us/HT213814

Resource: N/A

Hyperlink: https://support.apple.com/en-us/HT213813

Resource: N/A

Hyperlink: https://support.apple.com/kb/HT213814

Resource: N/A

Hyperlink: https://support.apple.com/kb/HT213816

Resource: N/A

Hyperlink: https://security.gentoo.org/glsa/202401-04

Resource: N/A

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://support.apple.com/en-us/HT213811	x_transferred
https://support.apple.com/en-us/HT213816	x_transferred
https://support.apple.com/en-us/HT213814	x_transferred
https://support.apple.com/en-us/HT213813	x_transferred
https://support.apple.com/kb/HT213814	x_transferred
https://support.apple.com/kb/HT213816	x_transferred
https://security.gentoo.org/glsa/202401-04	x_transferred

Hyperlink: https://support.apple.com/en-us/HT213811

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT213816

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT213814

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT213813

Resource:

x_transferred

Hyperlink: https://support.apple.com/kb/HT213814

Resource:

x_transferred

Hyperlink: https://support.apple.com/kb/HT213816

Resource:

x_transferred

Hyperlink: https://security.gentoo.org/glsa/202401-04

Resource:

x_transferred

2. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-843	CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')

Type: CWE

CWE ID: CWE-843

Description: CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')

Metrics

Version	Base score	Base severity	Vector
3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Metrics Other Info

kev

dateAdded:

2023-06-23

reference:

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-32439

Timeline

Event	Date
CVE-2023-32439 added to CISA KEV	2023-06-23 00:00:00

Event: CVE-2023-32439 added to CISA KEV

Date: 2023-06-23 00:00:00

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@apple.com

Published At:23 Jun, 2023 | 18:15

Updated At:14 Feb, 2025 | 16:21

CISA Catalog

Date Added	Due Date	Vulnerability Name	Required Action
2023-06-23	2023-07-14	Apple Multiple Products WebKit Type Confusion Vulnerability	Apply updates per vendor instructions.

Date Added: 2023-06-23

Due Date: 2023-07-14

Vulnerability Name: Apple Multiple Products WebKit Type Confusion Vulnerability

Required Action: Apply updates per vendor instructions.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Secondary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CPE Matches

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

>>safari>>Versions before 16.5.1(exclusive)

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

>>ipados>>Versions before 15.7.7(exclusive)

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

>>ipados>>Versions from 16.0(inclusive) to 16.5.1(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

>>iphone_os>>Versions before 15.7.7(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

>>iphone_os>>Versions from 16.0(inclusive) to 16.5.1(exclusive)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

>>macos>>Versions from 13.0(inclusive) to 13.4.1(exclusive)

webkitgtk>>webkitgtk\+>>Versions before 2.42.3(exclusive)

cpe:2.3:a:webkitgtk:webkitgtk\+:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-843	Primary	nvd@nist.gov
CWE-843	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-843

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-843

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
https://security.gentoo.org/glsa/202401-04	product-security@apple.com	Third Party Advisory
https://support.apple.com/en-us/HT213811	product-security@apple.com	Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213813	product-security@apple.com	Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213814	product-security@apple.com	Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213816	product-security@apple.com	Release Notes Vendor Advisory
https://support.apple.com/kb/HT213814	product-security@apple.com	Vendor Advisory
https://support.apple.com/kb/HT213816	product-security@apple.com	Vendor Advisory
https://security.gentoo.org/glsa/202401-04	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://support.apple.com/en-us/HT213811	af854a3a-2127-422b-91ae-364da2661108	Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213813	af854a3a-2127-422b-91ae-364da2661108	Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213814	af854a3a-2127-422b-91ae-364da2661108	Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213816	af854a3a-2127-422b-91ae-364da2661108	Release Notes Vendor Advisory
https://support.apple.com/kb/HT213814	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://support.apple.com/kb/HT213816	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory

Hyperlink: https://security.gentoo.org/glsa/202401-04

Source: product-security@apple.com

Resource:

Third Party Advisory

Hyperlink: https://support.apple.com/en-us/HT213811

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT213813

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT213814

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT213816

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory

Hyperlink: https://support.apple.com/kb/HT213814

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/kb/HT213816

Source: product-security@apple.com

Resource:

Vendor Advisory

Hyperlink: https://security.gentoo.org/glsa/202401-04

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

Hyperlink: https://support.apple.com/en-us/HT213811

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Release Notes

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT213813

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Release Notes

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT213814

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Release Notes

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/HT213816

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Release Notes

Vendor Advisory

Hyperlink: https://support.apple.com/kb/HT213814

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: https://support.apple.com/kb/HT213816

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Similar CVEs

896Records found

CVE-2020-12427

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-8.8||HIGH

EPSS-0.15% / 35.56%

7 Day CHG~0.00%

Published-13 May, 2020 | 14:28

Updated-04 Aug, 2024 | 11:56

The Western Digital WD Discovery application before 3.8.229 for MyCloud Home on Windows and macOS is vulnerable to CSRF, with impacts such as stealing data, modifying disk contents, or exhausting disk space.

Vendor-n/a Apple Inc.Western Digital Corp.Microsoft Corporation

Product-windows wd_discovery macos n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2022-26716

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.15% / 36.74%

7 Day CHG+0.01%

Published-01 Nov, 2022 | 00:00

Updated-06 May, 2025 | 15:15

A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-watchos tvos macos ipados safari iphone_os macOS watchOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-3774

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-24.11% / 95.85%

7 Day CHG~0.00%

Published-25 Mar, 2020 | 20:33

Updated-04 Aug, 2024 | 07:44

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation could lead to arbitrary code execution.

Vendor-Apple Inc.Microsoft Corporation Adobe Inc.

Product-photoshop_2020 windows photoshop_cc macos Adobe Photoshop

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-0643

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-36.30% / 96.99%

7 Day CHG~0.00%

Published-27 Feb, 2013 | 00:00

Updated-30 Jul, 2025 | 01:46

Known KEV||Action Due Date - 2024-10-08||The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, which makes it easier for remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.

CWE ID-CWE-269

Improper Privilege Management

CVE-2023-42852

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.83% / 82.18%

7 Day CHG-0.15%

Published-25 Oct, 2023 | 18:32

Updated-05 May, 2025 | 15:15

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution.

Vendor-Apple Inc.Debian GNU/Linux Fedora Project

Product-macos watchos debian_linux ipados fedora tvos iphone_os safari iOS and iPadOS watchOS Safari macOS tvOS

CVE-2018-4935

Matching Score-8

Matching Score-8

Product-linux_kernel windows_8.1 chrome_os mac_os_x windows flash_player_desktop_runtime windows_10 flash_player Adobe Flash Player 29.0.0.113 and earlier versions

CVSS Score-8.8||HIGH

EPSS-45.21% / 97.51%

7 Day CHG~0.00%

Published-19 May, 2018 | 17:00

Updated-05 Aug, 2024 | 05:18

Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Vendor-n/a Google LLC Adobe Inc.Apple Inc.Microsoft Corporation Linux Kernel Organization, Inc

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-4990

Matching Score-8

Matching Score-8

Product-mac_os_x windows acrobat_reader_dc acrobat_dc Adobe Acrobat and Reader 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier versions Acrobat and Reader

CVSS Score-8.8||HIGH

EPSS-60.07% / 98.19%

7 Day CHG~0.00%

Published-09 Jul, 2018 | 19:00

Updated-30 Jul, 2025 | 01:46

Known KEV||Action Due Date - 2022-06-22||Apply updates per vendor instructions.

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Vendor-n/a Adobe Inc.Apple Inc.Microsoft Corporation

CWE ID-CWE-415

Double Free

CVE-2023-42917

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.04% / 9.75%

7 Day CHG-0.00%

Published-30 Nov, 2023 | 22:18

Updated-30 Jul, 2025 | 01:37

Known KEV||Action Due Date - 2023-12-25||Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

Vendor-webkitgtk Apple Inc.Debian GNU/Linux Fedora Project

Product-fedora debian_linux safari ipados webkitgtk\+macos iphone_os Safari iOS and iPadOS macOS Multiple Products

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-42890

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.63% / 69.47%

7 Day CHG+0.15%

Published-12 Dec, 2023 | 00:27

Updated-13 Feb, 2025 | 17:12

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, watchOS 10.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2. Processing web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos safari macos iOS and iPadOS tvOS macOS Safari watchOS

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-0648

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-36.93% / 97.03%

7 Day CHG~0.00%

Published-27 Feb, 2013 | 00:00

Updated-30 Jul, 2025 | 01:46

Known KEV||Action Due Date - 2024-10-08||The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.

Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.

CVE-2023-42866

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.36% / 57.73%

7 Day CHG~0.00%

Published-10 Jan, 2024 | 22:03

Updated-03 Jun, 2025 | 15:15

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, tvOS 16.6, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-ipados safari macos tvos iphone_os watchos iOS and iPadOS macOS tvOS watchOS Safari

CVE-2012-5830

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-8.8||HIGH

EPSS-1.45% / 79.96%

7 Day CHG~0.00%

Published-21 Nov, 2012 | 11:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 on Mac OS X allows remote attackers to execute arbitrary code via an HTML document.

CWE ID-CWE-416

Use After Free

CVE-2023-42910

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.13% / 33.70%

7 Day CHG~0.00%

Published-12 Dec, 2023 | 00:27

Updated-13 Feb, 2025 | 17:13

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-8835

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.57% / 67.63%

7 Day CHG~0.00%

Published-27 Oct, 2020 | 19:53

Updated-04 Aug, 2024 | 21:31

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, iCloud for Windows 10.9, iOS 13.3 and iPadOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Red Hat, Inc.Apple Inc.

Product-enterprise_linux_server itunes iphone_os ipados tvos safari enterprise_linux_workstation enterprise_linux_desktop icloud iTunes for Windows iCloud for Windows Safari tvOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-42970

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.09% / 26.26%

7 Day CHG~0.00%

Published-11 Apr, 2025 | 14:53

Updated-29 Apr, 2025 | 20:08

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, Safari 17. Processing web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-ipados safari macos tvos watchos iphone_os Safari macOS watchOS iOS and iPadOS tvOS

CWE ID-CWE-416

Use After Free

CVE-2023-42833

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.82% / 73.49%

7 Day CHG+0.19%

Published-10 Jan, 2024 | 22:03

Updated-11 Jun, 2025 | 17:15

A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14, Safari 17, iOS 17 and iPadOS 17. Processing web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-macos safari ipados iphone_os Safari macOS iOS and iPadOS

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2023-42950

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.23% / 45.69%

7 Day CHG~0.00%

Published-28 Mar, 2024 | 15:39

Updated-13 Feb, 2025 | 17:13

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos safari macos iOS and iPadOS tvOS macOS Safari watchOS safari macos tvos iphone_os watchos ipad_os

CWE ID-CWE-416

Use After Free

CVE-2019-8686

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.82% / 73.39%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-itunes iphone_os tvos safari mac_os_x icloud iCloud for Windows (Microsoft Store)iTunes for Windows Safari iCloud for Windows macOS iOS tvOS

CWE ID-CWE-416

Use After Free

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-5087

Matching Score-8

Assigner-Chrome

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel windows enterprise_linux_server macos android Google Chrome prior to 59.0.3071.104 for Mac, Windows and Linux, and 59.0.3071.117 for Android

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.91% / 74.90%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

A use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, aka an IndexedDB sandbox escape.

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

CWE ID-CWE-416

Use After Free

CVE-2017-5063

Matching Score-8

Assigner-Chrome

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel windows enterprise_linux_server macos android Google Chrome prior to 58.0.3029.81 for Linux, Windows and Mac, and 58.0.3029.83 for Android

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.91% / 74.90%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2023-41074

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.23% / 78.35%

7 Day CHG~0.00%

Published-26 Sep, 2023 | 20:14

Updated-13 Feb, 2025 | 17:08

The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.

Vendor-Debian GNU/Linux Fedora Project Apple Inc.

Product-iphone_os debian_linux ipados tvos watchos safari fedora macos iOS and iPadOS tvOS macOS Safari watchOS

CVE-2017-5114

Matching Score-8

Assigner-Chrome

Vendor-n/a Debian GNU/Linux Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.48% / 80.24%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

Inappropriate use of partition alloc in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file.

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel windows debian_linux enterprise_linux_server macos android Google Chrome prior to 61.0.3163.79 for Linux, Windows and Mac, and 61.0.3163.81 for Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-5111

Matching Score-8

Assigner-Chrome

Vendor-n/a Debian GNU/Linux Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.48% / 80.24%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

A use after free in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file.

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel enterprise_linux_server debian_linux macos windows Google Chrome prior to 61.0.3163.79 for Linux, Windows and Mac

CWE ID-CWE-416

Use After Free

CVE-2017-5029

Matching Score-8

Assigner-Chrome

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation libxml2 (XMLSoft)Debian GNU/Linux Red Hat, Inc.

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-2.66% / 85.20%

7 Day CHG~0.00%

Published-24 Apr, 2017 | 23:00

Updated-20 Apr, 2025 | 01:37

The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel windows debian_linux enterprise_linux_server libxslt macos android Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-3106

Matching Score-8

Matching Score-8

Vendor-Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

CVSS Score-8.8||HIGH

EPSS-64.59% / 98.39%

7 Day CHG~0.00%

Published-11 Aug, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution.

Product-enterprise_linux_desktop chrome_os enterprise_linux_workstation linux_kernel flash_player_desktop_runtime windows_8.1 windows enterprise_linux windows_10 flash_player mac_os_x Flash Player

CWE ID-CWE-704

Incorrect Type Conversion or Cast

CVE-2017-5052

Matching Score-8

Assigner-Chrome

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel windows enterprise_linux_server macos android Google Chrome prior to 57.0.2987.133 for Mac, Windows and Linux, and 57.0.2987.132 for Android

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.54% / 66.73%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Linux, and 57.0.2987.132 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page that triggers improper casting.

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-3099

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.86% / 82.30%

7 Day CHG~0.00%

Published-14 Jul, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 3 raster data model. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-chrome_os linux_kernel flash_player_desktop_runtime windows_8.1 windows windows_10 flash_player mac_os_x Adobe Flash Player 26.0.0.131 and earlier.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-3074

Matching Score-8

Matching Score-8

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

CVSS Score-8.8||HIGH

EPSS-1.97% / 82.78%

7 Day CHG~0.00%

Published-09 May, 2017 | 16:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Graphics class. Successful exploitation could lead to arbitrary code execution.

Product-enterprise_linux_desktop chrome_os enterprise_linux_workstation linux_kernel flash_player_desktop_runtime windows_8.1 windows enterprise_linux windows_10 flash_player mac_os_x Adobe Flash Player 25.0.0.148 and earlier.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-3072

Matching Score-8

Matching Score-8

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

CVSS Score-8.8||HIGH

EPSS-1.97% / 82.78%

7 Day CHG~0.00%

Published-09 May, 2017 | 16:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BitmapData class. Successful exploitation could lead to arbitrary code execution.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-5078

Matching Score-8

Assigner-Chrome

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel enterprise_linux_server macos windows Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-2.48% / 84.69%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

Insufficient validation of untrusted input in Blink's mailto: handling in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac allowed a remote attacker to perform command injection via a crafted HTML page, a similar issue to CVE-2004-0121. For example, characters such as * have an incorrect interaction with xdg-email in xdg-utils, and a space character can be used in front of a command-line argument.

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

CVE-2017-3070

Matching Score-8

Matching Score-8

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

CVSS Score-8.8||HIGH

EPSS-1.97% / 82.78%

7 Day CHG~0.00%

Published-09 May, 2017 | 16:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the ConvolutionFilter class. Successful exploitation could lead to arbitrary code execution.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-41993

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-8.74% / 92.15%

7 Day CHG~0.00%

Published-21 Sep, 2023 | 18:23

Updated-30 Jul, 2025 | 01:37

Known KEV||Action Due Date - 2023-10-16||Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

CWE ID-CWE-754

Improper Check for Unusual or Exceptional Conditions

CVE-2017-5056

Matching Score-8

Assigner-Chrome

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel windows enterprise_linux_server macos android Google Chrome prior to 57.0.2987.133 for Linux, Windows and Mac, and 57.0.2987.132 for Android

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.91% / 74.90%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

CWE ID-CWE-416

Use After Free

CVE-2017-5062

Matching Score-8

Assigner-Chrome

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel windows enterprise_linux_server macos android Google Chrome prior to 58.0.3029.81 for Mac, Windows and Linux, and 58.0.3029.83 for Android

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.98% / 75.89%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

A use after free in Chrome Apps in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to potentially perform out of bounds memory access via a crafted Chrome extension.

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

CWE ID-CWE-416

Use After Free

CVE-2023-41976

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.35% / 56.43%

7 Day CHG~0.00%

Published-25 Oct, 2023 | 18:32

Updated-13 Feb, 2025 | 17:09

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos safari macos iOS and iPadOS tvOS macOS Safari watchOS

CWE ID-CWE-416

Use After Free

CVE-2021-38510

Matching Score-8

Assigner-Mozilla Corporation

Matching Score-8

Assigner-Mozilla Corporation

CVSS Score-8.8||HIGH

EPSS-0.47% / 63.61%

7 Day CHG~0.00%

Published-08 Dec, 2021 | 21:21

Updated-04 Aug, 2024 | 01:44

The executable file warning was not presented when downloading .inetloc files, which, due to a flaw in Mac OS, can run commands on a user's computer.*Note: This issue only affected Mac OS operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.

Vendor-Mozilla Corporation Apple Inc.

Product-firefox thunderbird macos firefox_esr Firefox Firefox ESR Thunderbird

CVE-2023-40447

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.29% / 52.35%

7 Day CHG~0.00%

Published-25 Oct, 2023 | 18:31

Updated-13 Feb, 2025 | 17:08

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos safari macos iOS and iPadOS tvOS macOS Safari watchOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-3073

Matching Score-8

Matching Score-8

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

CVSS Score-8.8||HIGH

EPSS-1.77% / 81.89%

7 Day CHG~0.00%

Published-09 May, 2017 | 16:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when handling multiple mask properties of display objects, aka memory corruption. Successful exploitation could lead to arbitrary code execution.

CWE ID-CWE-416

Use After Free

CVE-2023-4073

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.59% / 68.25%

7 Day CHG~0.00%

Published-03 Aug, 2023 | 00:27

Updated-13 Feb, 2025 | 17:08

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vendor-Debian GNU/Linux Fedora Project Apple Inc.Google LLC

Product-chrome debian_linux macos fedora Chrome

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-5077

Matching Score-8

Assigner-Chrome

Product-chrome enterprise_linux_desktop enterprise_linux_workstation linux_kernel windows enterprise_linux_server macos android Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-0.91% / 74.90%

7 Day CHG~0.00%

Published-27 Oct, 2017 | 05:00

Updated-20 Apr, 2025 | 01:37

Insufficient validation of untrusted input in Skia in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Microsoft Corporation Google LLC

CWE ID-CWE-125

Out-of-bounds Read

CVE-2017-3068

Matching Score-8

Matching Score-8

Vendor-n/a Linux Kernel Organization, Inc Red Hat, Inc.Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

CVSS Score-8.8||HIGH

EPSS-38.10% / 97.12%

7 Day CHG~0.00%

Published-09 May, 2017 | 16:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine. Successful exploitation could lead to arbitrary code execution.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-2987

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-3.89% / 87.80%

7 Day CHG~0.00%

Published-15 Feb, 2017 | 06:11

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable integer overflow vulnerability related to Flash Broker COM. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-chrome_os linux_kernel flash_player_desktop_runtime windows_8.1 windows windows_10 flash_player mac_os_x Adobe Flash Player 24.0.0.194 and earlier.

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2017-2988

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-40.87% / 97.28%

7 Day CHG~0.00%

Published-15 Feb, 2017 | 06:11

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-chrome_os linux_kernel flash_player_desktop_runtime windows_8.1 windows windows_10 flash_player mac_os_x Adobe Flash Player 24.0.0.194 and earlier.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-2999

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.01% / 76.15%

7 Day CHG~0.00%

Published-14 Mar, 2017 | 16:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality related to hosting playback surface. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-chrome_os linux_kernel flash_player_desktop_runtime windows_8.1 windows windows_10 flash_player mac_os_x Adobe Flash Player 24.0.0.221 and earlier.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-2930

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-73.56% / 98.75%

7 Day CHG~0.00%

Published-11 Jan, 2017 | 04:40

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability due to a concurrency error when manipulating a display list. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-mac_os_x chrome_os linux_kernel windows_8.1 windows_10 flash_player windows Adobe Flash Player 24.0.0.186 and earlier.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-2997

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-1.53% / 80.59%

7 Day CHG~0.00%

Published-14 Mar, 2017 | 16:00

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable buffer overflow / underflow vulnerability in the Primetime TVSDK that supports customizing ad information. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-chrome_os linux_kernel flash_player_desktop_runtime windows_8.1 windows windows_10 flash_player mac_os_x Adobe Flash Player 24.0.0.221 and earlier.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-2986

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-34.47% / 96.86%

7 Day CHG~0.00%

Published-15 Feb, 2017 | 06:11

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (FLV) codec. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-chrome_os linux_kernel flash_player_desktop_runtime windows_8.1 windows windows_10 flash_player mac_os_x Adobe Flash Player 24.0.0.194 and earlier.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-2985

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-40.87% / 97.28%

7 Day CHG~0.00%

Published-15 Feb, 2017 | 06:11

Updated-20 Apr, 2025 | 01:37

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class. Successful exploitation could lead to arbitrary code execution.

Vendor-n/a Linux Kernel Organization, Inc Apple Inc.Adobe Inc.Microsoft Corporation Google LLC

Product-chrome_os linux_kernel flash_player_desktop_runtime windows_8.1 windows windows_10 flash_player mac_os_x Adobe Flash Player 24.0.0.194 and earlier.

CWE ID-CWE-416

Use After Free

CVE-2023-39928

Matching Score-8

Assigner-Talos

Matching Score-8

Assigner-Talos

CVSS Score-8.8||HIGH

EPSS-0.15% / 35.61%

7 Day CHG-0.02%

Published-06 Oct, 2023 | 15:17

Updated-13 Feb, 2025 | 17:03

A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause memory corruption and potentially arbitrary code execution. A user would need to to visit a malicious webpage to trigger this vulnerability.

Vendor-webkitgtk Webkit Debian GNU/Linux Fedora Project

Product-webkitgtk debian_linux fedora Webkit

CWE ID-CWE-416

Use After Free

CVE-2017-2990

Matching Score-8

Matching Score-8