CVE-2023-32445

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

This issue was addressed with improved checks. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8 and iPadOS 15.7.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. Processing a document may lead to a cross site scripting attack.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Apple	Safari	>= unspecified, < 16.6
Apple	tvOS	>= unspecified, < 16.6
Apple	iOS and iPadOS	>= unspecified, < 16.6
Apple	macOS	>= unspecified, < 13.5
Apple	iOS and iPadOS	>= unspecified, < 15.7
Apple	watchOS	>= unspecified, < 9.6

References

https://support.apple.com/en-us/HT213841Vendor Advisory
https://support.apple.com/en-us/HT213842Vendor Advisory
https://support.apple.com/en-us/HT213843Vendor Advisory
https://support.apple.com/en-us/HT213846Vendor Advisory
https://support.apple.com/en-us/HT213847Vendor Advisory
https://support.apple.com/en-us/HT213848Vendor Advisory
https://support.apple.com/en-us/HT213841Vendor Advisory
https://support.apple.com/en-us/HT213842Vendor Advisory
https://support.apple.com/en-us/HT213843Vendor Advisory
https://support.apple.com/en-us/HT213846Vendor Advisory
https://support.apple.com/en-us/HT213847Vendor Advisory
https://support.apple.com/en-us/HT213848Vendor Advisory

Timeline

Published: Jul 28, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-324465.5Dell Wyse ThinOS versions prior to 2303 (9.4.1141) contain a sensitive information disclosure vulnerability. An unauthenticated malicious us CVE-2023-324475.5Dell Wyse ThinOS versions prior to 2306 (9.4.2103) contain a sensitive information disclosure vulnerability. A malicious user with local acc CVE-2023-324485.5PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains License Key Stored in Cleartext vulnerability. A local user with access to the insta CVE-2023-324497.8Dell PowerStore versions prior to 3.5 contain an improper verification of cryptographic signature vulnerability. An attacker can trick a hig CVE-2023-32454.8The Floating Chat Widget WordPress plugin before 3.1.2 does not sanitise and escape some of its settings, which could allow high privilege u CVE-2023-324507.8Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A low-privileged malicious user may potentially CVE-2023-324517.8Dell Display Manager application, version 2.1.1.17, contains a vulnerability that low privilege user can execute malicious code during insta CVE-2023-324533.9Dell BIOS contains an improper authentication vulnerability. A malicious user with physical access to the system may potentially exploit thi CVE-2023-324547.1DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability. A local malicious standa CVE-2023-324555.5Dell Wyse ThinOS versions prior to 2208 (9.3.2102) contain a sensitive information disclosure vulnerability. An unauthenticated malicious us CVE-2023-324578.8Dell PowerScale OneFS, versions 8.2.2.x-9.5.0.x, contains an improper privilege management vulnerability. A remote attacker with low privile CVE-2023-324587.8Dell AppSync, versions 4.4.0.0 to 4.6.0.0 including Service Pack releases, contains an improper access control vulnerability in Embedded Ser