Skip to content

CVE-2023-40403

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6,...

6.5 MediumFix available

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

1.33%Up 1.3 points since Sep 27, 2023

What each source reports

NVD Score used 6.5

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.

Record: CVE-2023-40403
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated: 2026-11-02

CVE List No score

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.

Record: CVE-2023-40403
Updated: 2026-11-02

EUVDEUVD-2023-44974 No score

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.

Record: EUVD-2023-44974
Updated: 2026-11-02

GitHub AdvisoriesGHSA-j822-w26r-9cxf 6.5

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6,...

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.

Record: GHSA-j822-w26r-9cxf
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSV 6.5

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.

Record: CVE-2023-40403
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVDEBIAN-CVE-2023-40403 6.5

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.

Record: DEBIAN-CVE-2023-40403
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated: 2026-11-02

Show 19 moreShow less

OSVOESA-2026-4424 6.5

libxslt security update

Libxslt is the XSLT C library developed for the GNOME project

Security Fix(es):

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.(CVE-2023-40403)

Record: OESA-2026-4424
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2025:8676 6.5

Red Hat Security Advisory: libxslt security update

Record: RHSA-2025:8676
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2025:9016 6.5

Red Hat Security Advisory: libxslt security update

Record: RHSA-2025:9016
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2026:29811 6.5

Red Hat Security Advisory: libxslt security update

Record: RHSA-2026:29811
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2026:6266 6.5

Red Hat Security Advisory: libxslt security update

Record: RHSA-2026:6266
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2026:6499 6.5

Red Hat Security Advisory: libxslt security update

Record: RHSA-2026:6499
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVRLSA-2025:8676 6.5

Moderate: libxslt security update

libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.

Security Fix(es):

libxslt: Processing web content may disclose sensitive information (CVE-2023-40403)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2025:8676
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVRLSA-2026:6266 6.5

Moderate: libxslt security update

libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.

Security Fix(es):

libxslt: Processing web content may disclose sensitive information (CVE-2023-40403)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:6266
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVUBUNTU-CVE-2023-40403 6.5

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.

Record: UBUNTU-CVE-2023-40403
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVALSA-2025:8676 No score

Moderate: libxslt security update

libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.

Security Fix(es):

libxslt: Processing web content may disclose sensitive information (CVE-2023-40403)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2025:8676
Updated: 2026-11-02

OSVALSA-2026:6266 No score

Moderate: libxslt security update

libxslt is a library for transforming XML files into other textual formats (including HTML, plain text, and other XML representations of the underlying data) using the standard XSLT stylesheet transformation mechanism.

Security Fix(es):

libxslt: Processing web content may disclose sensitive information (CVE-2023-40403)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:6266
Updated: 2026-11-02

OSVCLSA-2026-1776443255 No score

libxslt: Fix of CVE-2023-40403

CVE-2023-40403: make generate-id() deterministic to prevent memory layout leak

Record: CLSA-2026-1776443255
Updated: 2026-11-02

OSVCLSA-2026-1778898606 No score

libxslt: Fix of CVE-2023-40403

CVE-2023-40403: make generate-id() deterministic to prevent memory layout leak

Record: CLSA-2026-1778898606
Updated: 2026-11-02

OSVSUSE-SU-2025:1003-1 No score

Security update for libxslt

This update for libxslt fixes the following issues:

CVE-2023-40403: Fixed sensitive information disclosure during processing web content (bsc#1238591)
CVE-2024-55549: Fixed use-after-free in xsltGetInheritedNsList (bsc#1239637)
CVE-2025-24855: Fixed use-after-free in numbers.c (bsc#1239625)

Record: SUSE-SU-2025:1003-1
Updated: 2026-11-02

OSVSUSE-SU-2025:1125-1 No score

Security update for libxslt

This update for libxslt fixes the following issues:

CVE-2023-40403: Fixed sensitive information disclosure during processing web content (bsc#1238591)
CVE-2024-55549: Fixed use-after-free in xsltGetInheritedNsList (bsc#1239637)
CVE-2025-24855: Fixed use-after-free in numbers.c (bsc#1239625)

Record: SUSE-SU-2025:1125-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20201-1 No score

Security update for libxslt

This update for libxslt fixes the following issues:

CVE-2025-24855: Fix use-after-free of XPath context node (bsc#1239625)
CVE-2024-55549: Fix UAF related to excluded namespaces (bsc#1239637)
CVE-2023-40403: Make generate-id() deterministic (bsc#1238591)

Record: SUSE-SU-2025:20201-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20277-1 No score

Security update for libxslt

This update for libxslt fixes the following issues:

CVE-2025-24855: Fix use-after-free of XPath context node (bsc#1239625)
CVE-2024-55549: Fix UAF related to excluded namespaces (bsc#1239637)
CVE-2023-40403: Make generate-id() deterministic (bsc#1238591)

Record: SUSE-SU-2025:20277-1
Updated: 2026-11-02

OSVSUSE-SU-2026:2585-1 No score

Security update for libxslt

This update for libxslt fixes the following issue

CVE-2023-40403: Processing web content may disclose sensitive information (bsc#1238591).

Record: SUSE-SU-2026:2585-1
Updated: 2026-11-02

OSVUSN-7600-1 No score

libxslt vulnerability

It was discovered that libxslt could be made to expose sensitive information about address space layout. An attacker could possibly use this issue to bypass Address Space Layout Randomization (ASLR) protections.

Record: USN-7600-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`libxslt` AlmaLinux:8	before 1.1.32-6.2.el8_10	1.1.32-6.2.el8_10
`libxslt-devel` AlmaLinux:8	before 1.1.32-6.2.el8_10	1.1.32-6.2.el8_10
`libxslt` AlmaLinux:9	before 1.1.34-14.el9_7.1	1.1.34-14.el9_7.1
`libxslt-devel` AlmaLinux:9	before 1.1.34-14.el9_7.1	1.1.34-14.el9_7.1
`libxslt` TuxCare:AlmaLinux:9.6	before 1.1.34-13.el9_6.tuxcare.els2	1.1.34-13.el9_6.tuxcare.els2
`libxslt-devel` TuxCare:AlmaLinux:9.6	before 1.1.34-13.el9_6.tuxcare.els2	1.1.34-13.el9_6.tuxcare.els2
`libxslt` TuxCare:AlmaLinux:9.2	before 1.1.34-9.el9.tuxcare.els4	1.1.34-9.el9.tuxcare.els4
`libxslt-devel` TuxCare:AlmaLinux:9.2	before 1.1.34-9.el9.tuxcare.els4	1.1.34-9.el9.tuxcare.els4
`libxslt` Debian:12	before 1.1.35-1+deb12u2, plus listed versions 1.1.35-11.1.35-1+deb12u1	1.1.35-1+deb12u2
`libxslt` Debian:13	before 1.1.35-1.2+deb13u1, plus listed versions 1.1.35-1.2	1.1.35-1.2+deb13u1

Show 60 moreShow less

Affected packages
Package	Affected	Fixed
`libxslt` Debian:14	before 1.1.35-2, plus listed versions 1.1.35-1.2	1.1.35-2
`libxslt` Debian:11 From an advisory covering 2 CVEs	before 1.1.34-4+deb11u3, plus listed versions 1.1.34-41.1.34-4+deb11u11.1.34-4+deb11u2	1.1.34-4+deb11u3
`libxslt` Debian:12 From an advisory covering 2 CVEs	before 1.1.35-1+deb12u2, plus listed versions 1.1.35-11.1.35-1+deb12u1	1.1.35-1+deb12u2
`libxslt` Debian:13 From an advisory covering 2 CVEs	before 1.1.35-1.2+deb13u1, plus listed versions 1.1.35-1.2	1.1.35-1.2+deb13u1
`libxslt` openEuler:22.03-LTS-SP4	before 1.1.37-7.oe2203sp4	1.1.37-7.oe2203sp4
`libxslt-debuginfo` Red Hat:enterprise_linux:8::appstream	before 0:1.1.32-6.2.el8_10	0:1.1.32-6.2.el8_10
`libxslt-debugsource` Red Hat:enterprise_linux:8::appstream	before 0:1.1.32-6.2.el8_10	0:1.1.32-6.2.el8_10
`libxslt-devel` Red Hat:enterprise_linux:8::appstream	before 0:1.1.32-6.2.el8_10	0:1.1.32-6.2.el8_10
`libxslt` Red Hat:enterprise_linux:8::baseos	before 0:1.1.32-6.2.el8_10	0:1.1.32-6.2.el8_10
`libxslt-debuginfo` Red Hat:enterprise_linux:8::baseos	before 0:1.1.32-6.2.el8_10	0:1.1.32-6.2.el8_10
`libxslt-debugsource` Red Hat:enterprise_linux:8::baseos	before 0:1.1.32-6.2.el8_10	0:1.1.32-6.2.el8_10
`libxslt` Red Hat:rhel_eus:9.4::appstream	before 0:1.1.34-14.el9_4	0:1.1.34-14.el9_4
`libxslt-debuginfo` Red Hat:rhel_eus:9.4::appstream	before 0:1.1.34-14.el9_4	0:1.1.34-14.el9_4
`libxslt-debugsource` Red Hat:rhel_eus:9.4::appstream	before 0:1.1.34-14.el9_4	0:1.1.34-14.el9_4
`libxslt-devel` Red Hat:rhel_eus:9.4::appstream	before 0:1.1.34-14.el9_4	0:1.1.34-14.el9_4
`libxslt` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 2 CVEs	before 0:1.1.34-12.el9_2	0:1.1.34-12.el9_2
`libxslt-debuginfo` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 2 CVEs	before 0:1.1.34-12.el9_2	0:1.1.34-12.el9_2
`libxslt-debugsource` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 2 CVEs	before 0:1.1.34-12.el9_2	0:1.1.34-12.el9_2
`libxslt-devel` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 2 CVEs	before 0:1.1.34-12.el9_2	0:1.1.34-12.el9_2
`libxslt` Red Hat:enterprise_linux:9::appstream	before 0:1.1.34-14.el9_7.1	0:1.1.34-14.el9_7.1
`libxslt-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:1.1.34-14.el9_7.1	0:1.1.34-14.el9_7.1
`libxslt-debugsource` Red Hat:enterprise_linux:9::appstream	before 0:1.1.34-14.el9_7.1	0:1.1.34-14.el9_7.1
`libxslt-devel` Red Hat:enterprise_linux:9::appstream	before 0:1.1.34-14.el9_7.1	0:1.1.34-14.el9_7.1
`libxslt` Red Hat:rhel_eus:9.6::appstream	before 0:1.1.34-13.el9_6.1	0:1.1.34-13.el9_6.1
`libxslt-debuginfo` Red Hat:rhel_eus:9.6::appstream	before 0:1.1.34-13.el9_6.1	0:1.1.34-13.el9_6.1
`libxslt-debugsource` Red Hat:rhel_eus:9.6::appstream	before 0:1.1.34-13.el9_6.1	0:1.1.34-13.el9_6.1
`libxslt-devel` Red Hat:rhel_eus:9.6::appstream	before 0:1.1.34-13.el9_6.1	0:1.1.34-13.el9_6.1
`libxslt` Rocky Linux:8	before 0:1.1.32-6.2.el8_10	0:1.1.32-6.2.el8_10
`libxslt` Rocky Linux:9	before 0:1.1.34-14.el9_7.1	0:1.1.34-14.el9_7.1
`libxslt` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 3 CVEs	before 1.1.32-150000.3.17.1	1.1.32-150000.3.17.1
`libxslt` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 3 CVEs	before 1.1.32-150000.3.17.1	1.1.32-150000.3.17.1
`libxslt` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 3 CVEs	before 1.1.32-150000.3.17.1	1.1.32-150000.3.17.1
`libxslt` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 3 CVEs	before 1.1.32-150000.3.17.1	1.1.32-150000.3.17.1
`libxslt` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 3 CVEs	before 1.1.32-150000.3.17.1	1.1.32-150000.3.17.1
`libxslt` SUSE:Enterprise Storage 7.1 From an advisory covering 3 CVEs	before 1.1.32-150000.3.17.1	1.1.32-150000.3.17.1
`libxslt-python` openSUSE:Leap 15.6 From an advisory covering 3 CVEs	before 1.1.32-150000.3.17.1	1.1.32-150000.3.17.1
`libxslt` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 3 CVEs	before 1.1.34-150400.3.6.1	1.1.34-150400.3.6.1
`libxslt` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 3 CVEs	before 1.1.34-150400.3.6.1	1.1.34-150400.3.6.1
`libxslt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 3 CVEs	before 1.1.34-150400.3.6.1	1.1.34-150400.3.6.1
`libxslt` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 3 CVEs	before 1.1.34-150400.3.6.1	1.1.34-150400.3.6.1
`libxslt` SUSE:Linux Enterprise Module for Package Hub 15 SP6 From an advisory covering 3 CVEs	before 1.1.34-150400.3.6.1	1.1.34-150400.3.6.1
`libxslt` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 3 CVEs	before 1.1.34-150400.3.6.1	1.1.34-150400.3.6.1
`libxslt` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 3 CVEs	before 1.1.34-150400.3.6.1	1.1.34-150400.3.6.1
`libxslt` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 3 CVEs	before 1.1.34-150400.3.6.1	1.1.34-150400.3.6.1
`libxslt` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 3 CVEs	before 1.1.34-150400.3.6.1	1.1.34-150400.3.6.1
`libxslt` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 3 CVEs	before 1.1.34-150400.3.6.1	1.1.34-150400.3.6.1
`libxslt` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 3 CVEs	before 1.1.34-150400.3.6.1	1.1.34-150400.3.6.1
`libxslt` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 3 CVEs	before 1.1.34-150400.3.6.1	1.1.34-150400.3.6.1
`libxslt` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 3 CVEs	before 1.1.34-150400.3.6.1	1.1.34-150400.3.6.1
`libxslt` SUSE:Manager Proxy 4.3 From an advisory covering 3 CVEs	before 1.1.34-150400.3.6.1	1.1.34-150400.3.6.1
`libxslt` SUSE:Manager Server 4.3 From an advisory covering 3 CVEs	before 1.1.34-150400.3.6.1	1.1.34-150400.3.6.1
`libxslt` openSUSE:Leap 15.6 From an advisory covering 3 CVEs	before 1.1.34-150400.3.6.1	1.1.34-150400.3.6.1
`libxslt` SUSE:Linux Micro 6.0 From an advisory covering 3 CVEs	before 1.1.38-4.1	1.1.38-4.1
`libxslt` SUSE:Linux Micro 6.1 From an advisory covering 3 CVEs	before 1.1.38-slfo.1.1_2.1	1.1.38-slfo.1.1_2.1
`libxslt` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5	before 1.1.28-17.24.1	1.1.28-17.24.1
`libxslt` Ubuntu:Pro:14.04:LTS	before 1.1.28-2ubuntu0.2+esm3, plus listed versions 1.1.28-21.1.28-2build11.1.28-2ubuntu0.11.1.28-2ubuntu0.21.1.28-2ubuntu0.2+esm11.1.28-2ubuntu0.2+esm2	1.1.28-2ubuntu0.2+esm3
`libxslt` Ubuntu:Pro:16.04:LTS	before 1.1.28-2.1ubuntu0.3+esm2, plus listed versions 1.1.28-2build21.1.28-2.11.1.28-2.1ubuntu0.11.1.28-2.1ubuntu0.21.1.28-2.1ubuntu0.31.1.28-2.1ubuntu0.3+esm1	1.1.28-2.1ubuntu0.3+esm2
`libxslt` Ubuntu:Pro:18.04:LTS	before 1.1.29-5ubuntu0.3+esm1, plus listed versions 1.1.29-2.1ubuntu11.1.29-41.1.29-51.1.29-5ubuntu0.11.1.29-5ubuntu0.21.1.29-5ubuntu0.3	1.1.29-5ubuntu0.3+esm1
`libxslt` Ubuntu:Pro:20.04:LTS	before 1.1.34-4ubuntu0.20.04.3+esm1, plus listed versions 1.1.33-0ubuntu11.1.33-0ubuntu21.1.33-0ubuntu31.1.34-11.1.34-1ubuntu1 Show 5 moreShow less 1.1.34-31.1.34-41.1.34-4ubuntu0.20.04.11.1.34-4ubuntu0.20.04.21.1.34-4ubuntu0.20.04.3	1.1.34-4ubuntu0.20.04.3+esm1
`libxslt` Ubuntu:22.04:LTS	before 1.1.34-4ubuntu0.22.04.4, plus listed versions 1.1.34-41.1.34-4build11.1.34-4build21.1.34-4ubuntu0.22.04.11.1.34-4ubuntu0.22.04.21.1.34-4ubuntu0.22.04.3	1.1.34-4ubuntu0.22.04.4

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected
Nov 5, 2026	facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-40403 is a medium vulnerability (CVSS 6.5) in Apple Ipados, published September 26, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.33%, the 71st percentile. Fixed in libxslt 1.1.32-6.2.el8_10.

References

Show 62 moreShow less