Log in Start free

Vulnerability · Published Sep 6, 2023 · Assigned by apple

CVE-2023-32370

Medium 5.3

In plain English

A medium-severity security flaw in macOS from Apple. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.3Medium
Exploit odds (30 days)0.8%top 43.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3. Content Security Policy to block domains with wildcards may fail.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8webkit2gtk32.40.5-1.el8ALSA-2023:7055
AlmaLinux:9webkit2gtk32.40.5-1.el9ALSA-2023:6535
AlmaLinux:8webkit2gtk3-devel2.40.5-1.el8ALSA-2023:7055
AlmaLinux:9webkit2gtk3-devel2.40.5-1.el9ALSA-2023:6535
AlmaLinux:8webkit2gtk3-jsc2.40.5-1.el8ALSA-2023:7055
AlmaLinux:9webkit2gtk3-jsc2.40.5-1.el9ALSA-2023:6535
AlmaLinux:8webkit2gtk3-jsc-devel2.40.5-1.el8ALSA-2023:7055
AlmaLinux:9webkit2gtk3-jsc-devel2.40.5-1.el9ALSA-2023:6535
Debian:12webkit2gtk2.40.1-1DEBIAN-CVE-2023-32370
Debian:13webkit2gtk2.40.1-1DEBIAN-CVE-2023-32370
Debian:14webkit2gtk2.40.1-1DEBIAN-CVE-2023-32370
Debian:12wpewebkitno fix listedDEBIAN-CVE-2023-32370
Debian:13wpewebkit2.40.2-2DEBIAN-CVE-2023-32370
Debian:14wpewebkit2.40.2-2DEBIAN-CVE-2023-32370
Ubuntu:22.04:LTSqtwebkit-opensource-srcno fix listedUBUNTU-CVE-2023-32370
Ubuntu:24.04:LTSqtwebkit-opensource-srcno fix listedUBUNTU-CVE-2023-32370
Ubuntu:22.04:LTSwebkit2gtk2.40.4-0ubuntu0.22.04.1UBUNTU-CVE-2023-32370
Ubuntu:22.04:LTSwpewebkitno fix listedUBUNTU-CVE-2023-32370

Affected products (as reported)

VendorProductVersions
Apple macOS unspecified – before 13.3

References