CVE-2023-32370: Apple macOS

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3. Content Security Policy to block domains with wildcards may fail.

Affected products

• Apple macOS: from 13.0, before 13.3 (fixed in 13.3)
• WebKitGTK WebKitGTK: before 2.40.1 (fixed in 2.40.1)
• Wpewebkit Wpe Webkit: before 2.40.1 (fixed in 2.40.1)

Published 2023-09-06. Last modified 2026-06-17.