Apple Fixes Two Actively Exploited WebKit Bugs

Apple has issued fixes for two actively exploited flaws in its WebKit browser engine. The fixes exist for Macs, iPhones and iPads.

According to Apple, one of the flaws (CVE-2023-42916) is an out-of-bounds read issue that can enable sensitive information disclosure when processing web content. The other flaw (CVE-2023-42917) is a memory corruption bug that can allow for arbitrary code execution when processing web content.

While vague on the exact details of the exploits, Apple said it "is aware of …

actively exploited apple browser bugs corruption cve cve-2023-42916 cve-2023-42917 disclosure enable engine exploited fixes flaw flaws information information disclosure ipads iphones issue macs memory memory corruption out-of-bounds sensitive sensitive information web webkit