Actively exploited in the wild
Apple Multiple Products WebKit Memory Corruption Vulnerability
Apple - Multiple Products · Listed in the CISA KEV since 2023-06-23. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2023-32435
HighCVSS 8.8KEVSummary
A memory corruption issue was addressed with improved state management. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.
Risk Assessment
An attacker could remotely execute arbitrary code on a user's device, potentially leading to full system compromise or data theft.
Recommendation
Update systems to the latest versions: macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4 or later.
Other vulnerabilities in Apple WebKit
See all- CVE-2023-32409HighActively exploited
The issue was addressed with improved bounds checks. A remote attacker may be able to break out of Web Content sandbox. Apple is aware of a report that this issue may have been actively exploited.
- CVE-2023-32373HighActively exploited
A use-after-free issue was addressed with improved memory management. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
- CVE-2021-1789HighActively exploited
A type confusion issue exists in Apple products (macOS, iOS, iPadOS, watchOS, tvOS, Safari) due to improper state handling. Processing maliciously crafted web content may lead to arbitrary code execution.
Original NVD description (English source)
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.