CVE-2023-32435
HIGH KEVApple Safari < 16.4 - Out-of-Bounds Write
Title source: ruleDescription
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.7 and iPadOS 15.7.7. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.
References (5)
Scores
CVSS v3
8.8
EPSS
0.0023
EPSS Percentile
46.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CISA KEV
2023-06-23
VulnCheck KEV
2023-03-27
InTheWild.io
2023-06-21
ENISA EUVD
EUVD-2023-36679
CWE
CWE-787
Status
published
Products (4)
apple/ipados
< 15.7.7
apple/iphone_os
< 15.7.7
apple/macos
13.0 - 13.3
apple/safari
< 16.4
Published
Jun 23, 2023
KEV Added
Jun 23, 2023
Tracked Since
Feb 18, 2026