CVE-2023-38572

The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. A website may be able to bypass Same Origin Policy.

• http://www.openwall.com/lists/oss-security/2023/08/02/1Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/
• https://security.gentoo.org/glsa/202401-04
• https://support.apple.com/en-us/HT213841Vendor Advisory
• https://support.apple.com/en-us/HT213842Vendor Advisory
• https://support.apple.com/en-us/HT213843Vendor Advisory
• https://support.apple.com/en-us/HT213846Vendor Advisory
• https://support.apple.com/en-us/HT213847Vendor Advisory
• https://support.apple.com/en-us/HT213848Vendor Advisory
• https://www.debian.org/security/2023/dsa-5468
• http://www.openwall.com/lists/oss-security/2023/08/02/1Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/
• https://security.gentoo.org/glsa/202401-04
• https://support.apple.com/en-us/HT213841Vendor Advisory
• https://support.apple.com/en-us/HT213842Vendor Advisory
• https://support.apple.com/en-us/HT213843Vendor Advisory
• https://support.apple.com/en-us/HT213846Vendor Advisory
• https://support.apple.com/en-us/HT213847Vendor Advisory
• https://support.apple.com/en-us/HT213848Vendor Advisory
• https://www.debian.org/security/2023/dsa-5468

Published

Jul 27, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-38566Uncontrolled search path in some Intel(R) ISPC software befo…7.8
• CVE-2023-38568Archer A10 firmware versions prior to 'Archer A10(JP)_V2_230…8.8
• CVE-2023-38569Stored cross-site scripting vulnerability in SHIRASAGI prior…5.4
• CVE-2023-3857A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2023-38570Access of memory location after end of buffer for some Intel…7.8
• CVE-2023-38571This issue was addressed with improved validation of symlink…7.5
• CVE-2023-38573A use-after-free vulnerability exists in the way Foxit Reade…8.8
• CVE-2023-38574Open redirect vulnerability in VI Web Client prior to 7.9.6 …6.1
• CVE-2023-38575Non-transparent sharing of return predictor targets between …5.5
• CVE-2023-38576Hidden functionality vulnerability in LAN-WH300N/RE all vers…8
• CVE-2023-38579 The cross-site request forgery token in the req…8.8
• CVE-2023-3858A vulnerability has been found in phpscriptpoint Car Listing…6.1