CVE-2023-32358

HIGH

iPadOS 16.0-16.3 - Remote Code Execution via Type Confusion

Title source: llm

Description

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead to arbitrary code execution.

References (2)

Core 2

Core References

Release Notes, Vendor Advisory

https://support.apple.com/en-us/HT213670

Release Notes, Vendor Advisory

https://support.apple.com/en-us/HT213676

Scores

CVSS v3 8.8

EPSS 0.0059

EPSS Percentile 43.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-843

Status published

Products (3)

apple/ipados 16.0 - 16.4

apple/iphone_os 16.0 - 16.4

apple/macos 13.0 - 13.3

Published Aug 14, 2023

Tracked Since Feb 18, 2026