CVSS 3.1
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Атакува се
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и след действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.2, Safari 17.2, iOS 16.7.15 and iPadOS 16.7.15, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.
Засегнати продукти
- Apple iOS and iPadOS: unspecified преди 17.2
- Apple Safari: unspecified преди 17.2
- Apple macOS: unspecified преди 14.2
- Apple iOS and iPadOS: unspecified преди 16.7.15
- Apple iOS and iPadOS: unspecified преди 15.8.7
Red Hat: още 15 продукта, добавени от Red Hat
Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7
Вид слабост
История
- 12 март 2026 Публикувано
Други уязвимости в Apple iOS and iPadOS
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2023-43010
- https://nvd.nist.gov/vuln/detail/CVE-2023-43010
- https://support.apple.com/en-us/120877
- https://support.apple.com/en-us/120300
- https://support.apple.com/en-us/120879
- https://support.apple.com/en-us/126646
- https://support.apple.com/en-us/126632
- http://seclists.org/fulldisclosure/2026/Mar/1
- https://access.redhat.com/security/cve/CVE-2023-43010
- https://bugzilla.redhat.com/show_bug.cgi?id=2448778
- https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-43010.json
- https://access.redhat.com/errata/RHSA-2025:10364
- https://access.redhat.com/errata/RHSA-2024:9636
- https://access.redhat.com/errata/RHSA-2024:9680
- https://access.redhat.com/errata/RHSA-2024:9679
- https://access.redhat.com/errata/RHSA-2024:9653
- https://access.redhat.com/errata/RHSA-2024:9646
- https://access.redhat.com/errata/RHSA-2024:8496
- https://access.redhat.com/errata/RHSA-2024:8492
- https://access.redhat.com/errata/RHSA-2024:8180
- https://access.redhat.com/errata/RHSA-2024:9144