QwikSec

Security Database

CVE

CWE

Training

CVE-2023-40417

Published: Sep 26, 2023

Modified: Nov 4, 2025

PUBLISHED

Description

A window management issue was addressed with improved state management. This issue is fixed in Safari 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. Visiting a website that frames malicious content may lead to UI spoofing.

Vendor	Product	Versions
Apple	iOS and iPadOS	affected `unspecified - < 17`
Apple	Safari	affected `unspecified - < 17`
Apple	macOS	affected `unspecified - < 14`
Apple	watchOS	affected `unspecified - < 10`

References

https://support.apple.com/en-us/HT213938

https://support.apple.com/en-us/HT213941

https://support.apple.com/en-us/HT213940

https://support.apple.com/en-us/HT213937

http://seclists.org/fulldisclosure/2023/Oct/2

http://seclists.org/fulldisclosure/2023/Oct/8

http://seclists.org/fulldisclosure/2023/Oct/9

http://seclists.org/fulldisclosure/2023/Oct/3

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.