CVE-2023-42916

Name of the Vulnerable Software and Affected Versions iOS versions prior to 17.1.2 iPadOS versions prior to 17.1.2 macOS Sonoma versions prior to 14.1.2 Safari versions prior to 17.1.2

Description The issue is related to an out-of-bounds read in the WebKit web browser engine, which may allow an attacker to disclose sensitive information when processing web content. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

Recommendations For iOS versions prior to 17.1.2, update to iOS 17.1.2 or later. For iPadOS versions prior to 17.1.2, update to iPadOS 17.1.2 or later. For macOS Sonoma versions prior to 14.1.2, update to macOS Sonoma 14.1.2 or later. For Safari versions prior to 17.1.2, update to Safari 17.1.2 or later.