cbcvebase.
CVE-2023-32373
published 2023-06-23

CVE-2023-32373: A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS…

high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
KEVITW
CISA Known Exploited Vulnerabilitydue 2023-06-12
Exploited in the wild
A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Affected

27 ranges· showing 25
VendorProductVersion rangeFixed in
appleios_15.7.6_and_ipados
appleios_16.5_and_ipados
appleios_and_ipados>= unspecified < 15.715.7
appleios_and_ipados>= unspecified < 16.516.5
appleipados< 15.7.615.7.6
appleipados>= 16.0 < 16.516.5
appleiphone_os>= 15.0 < 15.7.615.7.6
appleiphone_os>= 16.0 < 16.516.5
applemacos< 13.413.4
applemacos>= unspecified < 13.413.4
applemacos_ventura
applesafari< 16.516.5
applesafari
applesafari>= unspecified < 16.516.5
appletvos< 16.516.5
appletvos
appletvos>= unspecified < 16.516.5
applewatchos< 9.59.5
applewatchos
applewatchos>= unspecified < 9.59.5
debianwebkit2gtk< webkit2gtk 2.40.2-1~deb12u1 (bookworm)webkit2gtk 2.40.2-1~deb12u1 (bookworm)
debianwpewebkit< webkit2gtk 2.40.2-1~deb12u1 (bookworm)webkit2gtk 2.40.2-1~deb12u1 (bookworm)
redhatenterprise_linux
redhatenterprise_linux
redhatenterprise_linux

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv8.8HIGH
vulncheck8.8HIGH
cisa8.8HIGH