Apple fixed new actively exploited CVE-2023-38606 zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-32435+1 related CVE | Memory Corruption in Apple WebKit (iOS, iPadOS, macOS, Safari) Enables Code Execution | 8.8 group max | 23% | KEV | KEV |
CVE-2023-37450+1 related CVE | Arbitrary Code Execution in Apple WebKit (iOS, iPadOS, macOS, Safari, tvOS, watchOS) | 8.8 group max | 19% | KEV | KEV |
From the original article
3 min read at securityaffairs.com
Apple released security updates to address an actively exploited zero-day flaw in iOS, iPadOS, macOS, tvOS, watchOS, and Safari. Apple released urgent security updates to address multiple flaws in iOS, iPadOS, macOS, tvOS, watchOS, and Safari, including an actively exploited zero-day. The vulnerability, tracked as CVE-2023-38606, resides in the kernel and can be exploited to modify sensitive kernel state potentially.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.