Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

Vulnerability IntelligenceCVE-2023-42843

CVE-2023-42843

HIGH7.5

An inconsistent user interface issue was addressed with improved state management

Published Feb 21, 2024

Modified 1 years ago

Fix available

Details

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, Safari 17.1, macOS Sonoma 14.1. Visiting a malicious website may lead to address bar spoofing.

Affected Packages

macOS

macOS 14

Fixed in:

14.1

References

http://www.openwall.com/lists/oss-security/2024/03/26/1

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IXLXIOAH5S7J22LJTCIAVFVVJ4TESAX4/

https://support.apple.com/en-us/HT213981

https://support.apple.com/en-us/HT213982

https://support.apple.com/en-us/HT213984

https://support.apple.com/en-us/HT213986

https://www.cve.org/CVERecord?id=CVE-2023-42843

CVSS Analysis

CVSS v3.1

4.3

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

LowI:L

Availability

NoneA:N

4.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Ecosystems

Timeline

PublishedFeb 21, 2024

ModifiedFeb 13, 2025

CVE-2023-42843 | Mondoo Vulnerability Intelligence