CVE-2023-35993

HighCVSS 7.8

Published: 27/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

Summary

A use-after-free issue was addressed with improved memory management. This issue is fixed in several versions of Apple operating systems.

Risk Assessment

An app may be able to execute arbitrary code with kernel privileges, posing a serious security risk to the system.

Recommendation

It is recommended to update to the latest versions of the operating systems to mitigate this vulnerability.

Other vulnerabilities in macOS Monterey, iOS, iPadOS, tvOS, macOS Big Sur, macOS Ventura, watchOS

CVE-2023-38606MediumActively exploited
The issue involves the potential for an app to modify sensitive kernel state. It has been addressed with improved state management in Apple operating systems.

Original NVD description (English source)

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to execute arbitrary code with kernel privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS