What is CVE-2023-41993?

CVE-2023-41993 is a vulnerability that affects various systems, including Apple's Safari, iPadOS, iPhone OS, and macOS, as well as other software configurations such as Fedora, Debian, Oracle GraalVM, Oracle JDK, Oracle JRE, and NetApp products. The severity of this vulnerability is not explicitly mentioned in the sources, but it is known to potentially lead to arbitrary code execution. This issue has been addressed in macOS Sonoma 14 and other updates. It is important for users to keep their systems updated to protect against such vulnerabilities.

Who is impacted by CVE-2023-41993?

Some of the affected versions include macOS Sonoma 14, iOS versions before 16.7, and WebKitGTK+ versions earlier than 2.42.2. This vulnerability can potentially lead to arbitrary code execution, posing a risk to users who have not updated their systems to the latest versions.

What should I do if I’m affected?

If you're affected by the CVE-2023-41993 vulnerability, it's crucial to update your system to the latest version to mitigate risks. Check if your system or software is listed in the affected configurations. Visit the software vendor's website for updates and patches. Download and install the latest version or security patch. Restart your system if required. Stay informed about future updates and vulnerabilities.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-41993 vulnerability, also known as Apple Multiple Products WebKit Code Execution Vulnerability, is indeed listed in CISA's Known Exploited Vulnerabilities Catalog. It was added on September 25, 2023, with a due date of October 16, 2023.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-754, which refers to improper checks for unusual or exceptional conditions.

Learn More

To better understand its impact, severity, and technical details, refer to the NVD page and the sources listed below.

• Gentoo security

• NetApp Product Security

• About the security content of macOS Sonoma 14

• BOD 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities | CISA