CVE-2023-41993
Fixed in a distro release ExploitedEPSS 24%CVSS 8.8
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.
Products: Apple macOS, apple iphone_os, apple ipad_os, fedoraproject fedora, debian_linux, oracle graalvm, oracle jdk, oracle jre, netapp cloud_insights_acquisition_unit, netapp cloud_insights_storage_workload_security_agent, NetApp OnCommand Insight, NetApp OnCommand Workflow Automation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | openjdk-11-openj9 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9 | 0 |
| Chainguard | openjdk-11-openj9-dbg | 0 |
| Chainguard | openjdk-11-openj9-dbg | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-default-jdk | 0 |
| Chainguard | openjdk-11-openj9-default-jdk | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-default-jvm | 0 |
| Chainguard | openjdk-11-openj9-default-jvm | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-default-policy | no fix |
| Chainguard | openjdk-11-openj9-default-policy | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-doc | 0 |
| Chainguard | openjdk-11-openj9-doc | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-jmods | 0 |
| Chainguard | openjdk-11-openj9-jmods | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-jre | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-jre | 0 |
| Chainguard | openjdk-17-openj9 | 0 |
| Chainguard | openjdk-17-openj9 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-dbg | 0 |
| Chainguard | openjdk-17-openj9-dbg | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-jdk | 0 |
| Chainguard | openjdk-17-openj9-default-jdk | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-jvm | 0 |
| Chainguard | openjdk-17-openj9-default-jvm | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-policy | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-policy | no fix |
| Chainguard | openjdk-17-openj9-doc | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-doc | 0 |
| Chainguard | openjdk-17-openj9-jmods | 0 |
| Chainguard | openjdk-17-openj9-jmods | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-jre | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-jre | 0 |
| Chainguard | openjdk-21-openj9 | 0 |
| Chainguard | openjdk-21-openj9 | 0.48.0-r2 |
| Chainguard | openjdk-21-openj9-dbg | 0.48.0-r2 |
| Chainguard | openjdk-21-openj9-dbg | 0 |
| Chainguard | openjdk-21-openj9-default-jdk | 0 |
| Chainguard | openjdk-21-openj9-default-jdk | 0.48.0-r2 |
| Chainguard | openjdk-21-openj9-default-jvm | 0 |
| Chainguard | openjdk-21-openj9-default-jvm | 0.48.0-r2 |
| Chainguard | openjdk-21-openj9-default-policy | 0.48.0-r2 |
| Chainguard | openjdk-21-openj9-default-policy | no fix |
| Chainguard | openjdk-21-openj9-doc | 0 |
| Chainguard | openjdk-21-openj9-doc | 0.48.0-r2 |
| Chainguard | openjdk-21-openj9-jmods | 0.48.0-r2 |
| Chainguard | openjdk-21-openj9-jmods | 0 |
| Chainguard | openjdk-21-openj9-jre | 0 |
| Chainguard | openjdk-21-openj9-jre | 0.48.0-r2 |
| Chainguard | openjdk-25-openj9 | 0 |
| Chainguard | openjdk-25-openj9-dbg | 0 |
| Chainguard | openjdk-25-openj9-default-jdk | 0 |
| Chainguard | openjdk-25-openj9-default-jvm | 0 |
| Chainguard | openjdk-25-openj9-jmods | 0 |
| Chainguard | openjdk-25-openj9-jre | 0 |
| Chainguard | openjdk-26-openj9 | 0 |
| Chainguard | openjdk-26-openj9-dbg | 0 |
| Chainguard | openjdk-26-openj9-default-jdk | 0 |
| Chainguard | openjdk-26-openj9-default-jvm | 0 |
| Chainguard | openjdk-26-openj9-jmods | 0 |
| Chainguard | openjdk-26-openj9-jre | 0 |
| Chainguard | openjdk-7 | no fix |
| Chainguard | openjdk-8 | 8.412.08-r0 |
| Chainguard | openjdk-8 | 8.482-r8 |
| Chainguard | openjdk-8-dbg | 8.482-r8 |
| Chainguard | openjdk-8-default-jdk | 8.482-r8 |
| Chainguard | openjdk-8-default-jdk | 8.412.08-r0 |
| Chainguard | openjdk-8-default-jvm | 8.412.08-r0 |
| Chainguard | openjdk-8-default-jvm | 8.482-r8 |
| Chainguard | openjdk-8-demos | 8.412.08-r0 |
| Chainguard | openjdk-8-demos | 8.482-r8 |
| Chainguard | openjdk-8-doc | 8.482-r8 |
| Chainguard | openjdk-8-jre | 8.482-r8 |
| Chainguard | openjdk-8-jre | 8.412.08-r0 |
| Chainguard | openjdk-8-openj9 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-dbg | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-dbg | 0.57.0-r5 |
| Chainguard | openjdk-8-openj9-default-jdk | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-default-jvm | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-doc | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-jre | 0.53.0-r1 |
| Debian 11 | webkit2gtk | 2.42.1-1~deb11u1 |
| Debian 12 | webkit2gtk | 2.42.1-1~deb12u1 |
| Debian 12 | wpewebkit | no fix |
| Debian 13 | webkit2gtk | 2.42.1-1 |
| Debian 13 | wpewebkit | 2.42.1-1 |
| Debian 14 | webkit2gtk | 2.42.1-1 |
| Debian 14 | wpewebkit | 2.42.1-1 |
| Red Hat Enterprise Linux 8 | webkit2gtk3 | 0:2.38.5-1.el8_8.5 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-debuginfo | 0:2.38.5-1.el8_8.5 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-debugsource | 0:2.38.5-1.el8_8.5 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-devel | 0:2.38.5-1.el8_8.5 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-devel-debuginfo | 0:2.38.5-1.el8_8.5 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc | 0:2.38.5-1.el8_8.5 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc-debuginfo | 0:2.38.5-1.el8_8.5 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc-devel | 0:2.38.5-1.el8_8.5 |
| Red Hat Enterprise Linux 8 | webkit2gtk3-jsc-devel-debuginfo | 0:2.38.5-1.el8_8.5 |
| Red Hat Enterprise Linux 9 | webkit2gtk3 | 0:2.38.5-1.el9_2.3 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-debuginfo | 0:2.38.5-1.el9_2.3 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-debugsource | 0:2.38.5-1.el9_2.3 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-devel | 0:2.38.5-1.el9_2.3 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-devel-debuginfo | 0:2.38.5-1.el9_2.3 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-jsc | 0:2.38.5-1.el9_2.3 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-jsc-debuginfo | 0:2.38.5-1.el9_2.3 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-jsc-devel | 0:2.38.5-1.el9_2.3 |
| Red Hat Enterprise Linux 9 | webkit2gtk3-jsc-devel-debuginfo | 0:2.38.5-1.el9_2.3 |
| Red Hat rhel els 7 | webkitgtk4 | 0:2.48.3-2.el7_9 |
| Red Hat rhel els 7 | webkitgtk4-debuginfo | 0:2.48.3-2.el7_9 |
| Red Hat rhel els 7 | webkitgtk4-devel | 0:2.48.3-2.el7_9 |
| Red Hat rhel els 7 | webkitgtk4-doc | 0:2.48.3-2.el7_9 |
| Red Hat rhel els 7 | webkitgtk4-jsc | 0:2.48.3-2.el7_9 |
| Red Hat rhel els 7 | webkitgtk4-jsc-devel | 0:2.48.3-2.el7_9 |
| SUSE Enterprise Storage 7 | webkit2gtk3 | 2.42.1-150200.87.4 |
| SUSE Enterprise Storage 7.1 | webkit2gtk3 | 2.42.1-150200.87.4 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | webkit2gtk3 | 2.42.1-150000.3.153.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | webkit2gtk3 | 2.42.1-150200.87.4 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | webkit2gtk3 | 2.42.1-150200.87.4 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | webkit2gtk3 | 2.42.1-150200.87.4 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | webkit2gtk3-soup2 | 2.42.1-150400.4.57.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | webkit2gtk3-soup2 | 2.42.1-150400.4.57.2 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP4 | webkit2gtk3 | 2.42.1-150400.4.57.2 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP5 | webkit2gtk3 | 2.42.1-150400.4.57.2 |
| SUSE Linux Enterprise Module for Development Tools 15 SP4 | webkit2gtk4 | 2.42.1-150400.4.57.3 |
| SUSE Linux Enterprise Module for Development Tools 15 SP5 | webkit2gtk4 | 2.42.1-150400.4.57.3 |
| SUSE Linux Enterprise Server 12 SP5 | webkit2gtk3 | 2.42.1-2.155.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | webkit2gtk3 | 2.42.1-150000.3.153.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | webkit2gtk3 | 2.42.1-150200.87.4 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | webkit2gtk3 | 2.42.1-150200.87.4 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | webkit2gtk3 | 2.42.1-2.155.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | webkit2gtk3 | 2.42.1-150000.3.153.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | webkit2gtk3 | 2.42.1-150200.87.4 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | webkit2gtk3 | 2.42.1-150200.87.4 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | webkit2gtk3 | 2.42.1-2.155.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP5 | webkit2gtk3 | 2.42.1-2.155.1 |
| SUSE Manager Proxy 4.2 | webkit2gtk3 | 2.42.1-150200.87.4 |
| SUSE Manager Server 4.2 | webkit2gtk3 | 2.42.1-150200.87.4 |
| Ubuntu 16.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 16.04 LTS | qtwebkit-source | no fix |
| Ubuntu 16.04 LTS | webkit2gtk | no fix |
| Ubuntu 16.04 LTS | webkitgtk | no fix |
| Ubuntu 18.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 18.04 LTS | qtwebkit-source | no fix |
| Ubuntu 18.04 LTS | webkit2gtk | no fix |
| Ubuntu 18.04 LTS | webkitgtk | no fix |
| Ubuntu 20.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 20.04 LTS | webkit2gtk | no fix |
| Ubuntu 20.04 LTS | wpewebkit | no fix |
| Ubuntu 22.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 22.04 LTS | webkit2gtk | 2.42.1-0ubuntu0.22.04.1 |
| Ubuntu 22.04 LTS | wpewebkit | no fix |
| Ubuntu 24.04 LTS | qtwebkit-opensource-src | no fix |
| Wolfi | openjdk-7 | no fix |
| Wolfi | openjdk-8 | 8.482-r8 |
| Wolfi | openjdk-8 | 8.412.08-r0 |
| Wolfi | openjdk-8-dbg | 8.482-r8 |
| Wolfi | openjdk-8-default-jdk | 8.482-r8 |
| Wolfi | openjdk-8-default-jdk | 8.412.08-r0 |
| Wolfi | openjdk-8-default-jvm | 8.412.08-r0 |
| Wolfi | openjdk-8-default-jvm | 8.482-r8 |
| Wolfi | openjdk-8-demos | 8.412.08-r0 |
| Wolfi | openjdk-8-demos | 8.482-r8 |
| Wolfi | openjdk-8-doc | 8.482-r8 |
| Wolfi | openjdk-8-jre | 8.482-r8 |
| Wolfi | openjdk-8-jre | 8.412.08-r0 |
| openSUSE Leap 15.4 | webkit2gtk3 | 2.42.1-150400.4.57.2 |
| openSUSE Leap 15.4 | webkit2gtk3-soup2 | 2.42.1-150400.4.57.2 |
| openSUSE Leap 15.4 | webkit2gtk4 | 2.42.1-150400.4.57.3 |
| openSUSE Leap 15.5 | webkit2gtk3 | 2.42.1-150400.4.57.2 |
| openSUSE Leap 15.5 | webkit2gtk3-soup2 | 2.42.1-150400.4.57.2 |
| openSUSE Leap 15.5 | webkit2gtk4 | 2.42.1-150400.4.57.3 |