Intrusion PreventionApple.WebKit.GetterSetter.Object.Type.Confusion
Description
This indicates an attack attempt to exploit a Type Confusion Vulnerability in Apple Webkit.
The vulnerability is due to an error when the vulnerable software handles a maliciously crafted HTML file. A remote, unauthenticated attacker could exploit this vulnerability by enticing a victim to access a maliciously crafted webpage. Successfully exploiting this vulnerability could result in arbitrary code execution in the context of the victim's browser.
Affected Products
iOS before 16.7
Safari before 17
MacOS before 14
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://support.apple.com/en-us/HT213940
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2024-03-27 | 27.756 |
| ID | 54919 |
| Created | Mar 19, 2024 |
| Updated | Mar 27, 2024 |
| Risk |
|
| CVE ID | CVE-2023-41993 |
| Known Exploited | Yes |
| Exploit Prediction Score | 0.08% |
| Default Action | pass |
| Active | |
| Affected OS | MacOS |
| Affected App | Apple |