Actively exploited in the wild

Apple Multiple Products Integer Overflow Vulnerability

Apple - Multiple Products · Listed in the CISA KEV since 2023-06-23. This indicates confirmed attacks in production environments.

Required action: Apply updates per vendor instructions.

CVE-2023-32434

HighCVSS 7.8KEV

Published: 23/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/09/2026(UTC)NVD NIST

Summary

An integer overflow was addressed with improved input validation. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.

Risk Assessment

A local attacker could gain full control of the system, potentially leading to malware installation or data theft.

Recommendation

Update systems to the latest versions: watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, watchOS 8.8.1, iOS 16.5.1 and iPadOS 16.5.1, macOS Ventura 13.4.1.

Other vulnerabilities in Apple Kernel

CVE-2021-1782HighActively exploited
A race condition exists in Apple products (macOS, iOS, iPadOS, watchOS, tvOS) due to improper locking. A malicious application may be able to elevate privileges. Apple is aware of reports that this issue may have been actively exploited.

Original NVD description (English source)

An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, watchOS 8.8.1, iOS 16.5.1 and iPadOS 16.5.1, macOS Ventura 13.4.1. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.