CVE-2023-32439

high-risk

Published 2023-06-23

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, Safari 16.5.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Do I need to act?

1.2% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

CISA KEV: actively exploited in the wild

On the Known Exploited Vulnerabilities catalog — federal agencies must patch

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 8.8/10 High

NETWORK / LOW complexity

Affected Products (5)

Safari

Ipados

Iphone Os

Macos

Webkitgtk\+

Affected Vendors

Apple Webkitgtk

References (15)

Third Party Advisory https://security.gentoo.org/glsa/202401-04

Release Notes https://support.apple.com/en-us/HT213811

Release Notes https://support.apple.com/en-us/HT213813

Release Notes https://support.apple.com/en-us/HT213814

Release Notes https://support.apple.com/en-us/HT213816

Vendor Advisory https://support.apple.com/kb/HT213814

Vendor Advisory https://support.apple.com/kb/HT213816

Third Party Advisory https://security.gentoo.org/glsa/202401-04

Release Notes https://support.apple.com/en-us/HT213811

Release Notes https://support.apple.com/en-us/HT213813

Release Notes https://support.apple.com/en-us/HT213814

Release Notes https://support.apple.com/en-us/HT213816

Vendor Advisory https://support.apple.com/kb/HT213814

Vendor Advisory https://support.apple.com/kb/HT213816

US Government Resource https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-...

/ 100

high-risk

Severity 30/34 · Critical

Exploitability 10/34 · Low

Exposure 12/34 · Low