CVE-2023-40403
CVE-2023-40403
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.
CVSS 6.5 · Medium · EPSS 1.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
ios and ipados
- Versions
- ≥ unspecified, < 17: Affected (custom)
Update to 17
macos
- Versions
- ≥ unspecified, < 12.7: Affected (custom)
Update to 12.7
ios and ipados
- Versions
- ≥ unspecified, < 16.7: Affected (custom)
Update to 16.7
macos
- Versions
- ≥ unspecified, < 13.6: Affected (custom)
Update to 13.6
tvos
- Versions
- ≥ unspecified, < 17: Affected (custom)
Update to 17
macos
- Versions
- ≥ unspecified, < 14: Affected (custom)
Update to 14
watchos
- Versions
- ≥ unspecified, < 10: Affected (custom)
Update to 10
libxslt Debian:12
- Versions
- 1.1.35-1
- 1.1.35-1+deb12u1
- Affected ranges
- ECOSYSTEM: < 1.1.35-1+deb12u2
Update to 1.1.35-1+deb12u2
libxslt Debian:13
- Versions
- 1.1.35-1.2
- Affected ranges
- ECOSYSTEM: < 1.1.35-1.2+deb13u1
Update to 1.1.35-1.2+deb13u1
libxslt Debian:14
- Versions
- 1.1.35-1.2
- Affected ranges
- ECOSYSTEM: < 1.1.35-2
Update to 1.1.35-2
libxslt Ubuntu:Pro:14.04:LTS
- Versions
- 1.1.28-2
- 1.1.28-2build1
- 1.1.28-2ubuntu0.1
- 1.1.28-2ubuntu0.2
- 1.1.28-2ubuntu0.2+esm1
- 1.1.28-2ubuntu0.2+esm2
- Affected ranges
- ECOSYSTEM: < 1.1.28-2ubuntu0.2+esm3
Update to 1.1.28-2ubuntu0.2+esm3
libxslt Ubuntu:Pro:16.04:LTS
- Versions
- 1.1.28-2build2
- 1.1.28-2.1
- 1.1.28-2.1ubuntu0.1
- 1.1.28-2.1ubuntu0.2
- 1.1.28-2.1ubuntu0.3
- 1.1.28-2.1ubuntu0.3+esm1
- Affected ranges
- ECOSYSTEM: < 1.1.28-2.1ubuntu0.3+esm2
Update to 1.1.28-2.1ubuntu0.3+esm2
libxslt Ubuntu:Pro:18.04:LTS
- Versions
- 1.1.29-2.1ubuntu1
- 1.1.29-4
- 1.1.29-5
- 1.1.29-5ubuntu0.1
- 1.1.29-5ubuntu0.2
- 1.1.29-5ubuntu0.3
- Affected ranges
- ECOSYSTEM: < 1.1.29-5ubuntu0.3+esm1
Update to 1.1.29-5ubuntu0.3+esm1
libxslt Ubuntu:Pro:20.04:LTS
- Versions
- 1.1.33-0ubuntu1
- 1.1.33-0ubuntu2
- 1.1.33-0ubuntu3
- 1.1.34-1
- 1.1.34-1ubuntu1
- 1.1.34-3
- 1.1.34-4
- 1.1.34-4ubuntu0.20.04.1
- 1.1.34-4ubuntu0.20.04.2
- 1.1.34-4ubuntu0.20.04.3
- Affected ranges
- ECOSYSTEM: < 1.1.34-4ubuntu0.20.04.3+esm1
Update to 1.1.34-4ubuntu0.20.04.3+esm1
libxslt Ubuntu:22.04:LTS
- Versions
- 1.1.34-4
- 1.1.34-4build1
- 1.1.34-4build2
- 1.1.34-4ubuntu0.22.04.1
- 1.1.34-4ubuntu0.22.04.2
- 1.1.34-4ubuntu0.22.04.3
- Affected ranges
- ECOSYSTEM: < 1.1.34-4ubuntu0.22.04.4
Update to 1.1.34-4ubuntu0.22.04.4
Original sources
- https://support.apple.com/en-us/HT213938
- https://support.apple.com/en-us/HT213932
- https://support.apple.com/en-us/HT213927
- https://support.apple.com/en-us/HT213931
- https://support.apple.com/en-us/HT213936
- https://support.apple.com/en-us/HT213940
- https://support.apple.com/en-us/HT213937
- http://seclists.org/fulldisclosure/2023/Oct/5
- http://seclists.org/fulldisclosure/2023/Oct/10
- http://seclists.org/fulldisclosure/2023/Oct/6
- http://seclists.org/fulldisclosure/2023/Oct/8
- http://seclists.org/fulldisclosure/2023/Oct/9
- http://seclists.org/fulldisclosure/2023/Oct/3
- http://seclists.org/fulldisclosure/2023/Oct/4
- https://lists.debian.org/debian-lts-announce/2025/09/msg00024.html
- https://support.apple.com/kb/HT213940
- https://support.apple.com/kb/HT213932
- https://support.apple.com/kb/HT213931
- https://support.apple.com/kb/HT213938
- https://support.apple.com/kb/HT213937
- https://support.apple.com/kb/HT213936
- https://nvd.nist.gov/vuln/detail/CVE-2023-40403