Actively exploited in the wild
Apple Multiple Products WebKit Code Execution Vulnerability
Apple — Multiple Products · Listed in the CISA KEV since 2023-07-13. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
CVE-2023-37450
HighCVSS 8.8KEVExploitation Probability (EPSS)
Very high risk97th percentile — higher than 97% of all known CVEs
Summary
The issue was addressed with improved checks. Processing web content may lead to arbitrary code execution.
Risk Assessment
There is a risk that this vulnerability may have been actively exploited, potentially leading to serious security consequences.
Recommendation
It is recommended to update to iOS 16.6, iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5, or watchOS 9.6 to mitigate this vulnerability.
Original NVD description (English source)
The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.