Skip to content
NewA calmer, faster ZeroHour
VulnerabilitycriticalExploited in the wild

Apple backports fix for exploited WebKit bug to older iPhones, iPads (CVE-2023-23529)

Help Net Securityby @zeljkazorz ()2 min read3 · 1 read
Analyze CVE-2023-23529 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2023-23529
WebKit Type Confusion RCE in Apple iOS, iPadOS, macOS, and Safari
8.89%KEV
KEV
CVE-2023-23537
A privacy issue was addressed with improved private data redaction for log entries
5.5<1%
CVE-2023-27965
+1 related CVE
A memory corruption issue was addressed with improved state management
7.8
group max
<1%

From the original article

2 min read at helpnetsecurity.com

Apple has released security updates for – pardon the pop-culture reference – everyhing everywhere all at once, and has fixed the WebKit vulnerability (CVE-2023-23529) exploited in the wild for users of older iPhones and iPads. This latest batch of security updates targets the iOS and iPad 16. x and 15.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.