CVE-2023-27932

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, tvOS 16.4, watchOS 9.4. Processing maliciously crafted web content may bypass Same Origin Policy.

• CWE-346

• https://support.apple.com/en-us/HT213670Vendor Advisory
• https://support.apple.com/en-us/HT213671Vendor Advisory
• https://support.apple.com/en-us/HT213674Vendor Advisory
• https://support.apple.com/en-us/HT213676Vendor Advisory
• https://support.apple.com/en-us/HT213678Vendor Advisory
• https://support.apple.com/en-us/HT213670Vendor Advisory
• https://support.apple.com/en-us/HT213671Vendor Advisory
• https://support.apple.com/en-us/HT213674Vendor Advisory
• https://support.apple.com/en-us/HT213676Vendor Advisory
• https://support.apple.com/en-us/HT213678Vendor Advisory

Published

May 8, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-27927An authenticated malicious user could acquire the simple mai…6.5
• CVE-2023-27928A privacy issue was addressed with improved private data red…3.3
• CVE-2023-27929An out-of-bounds read was addressed with improved input vali…5.5
• CVE-2023-2793Mattermost fails to validate links on external websites when…6.5
• CVE-2023-27930A type confusion issue was addressed with improved checks. T…7.8
• CVE-2023-27931This issue was addressed by removing the vulnerable code. Th…5.5
• CVE-2023-27933The issue was addressed with improved memory handling. This …6.7
• CVE-2023-27934A memory initialization issue was addressed. This issue is f…8.8
• CVE-2023-27935The issue was addressed with improved bounds checks. This is…8.8
• CVE-2023-27936An out-of-bounds write issue was addressed with improved inp…7.8
• CVE-2023-27937An integer overflow was addressed with improved input valida…7.8
• CVE-2023-27938An out-of-bounds read issue was addressed with improved inpu…7.8