VulnerabilitycriticalExploited in the wild

WebKit Under Attack: Apple Issues Emergency Patches for 3 New Zero

The Hacker Newsby @TheHackersNewsMay 20, 2023 · 04:03 UTC (May 20, 2023)2 min read3 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-32409 CVE-2023-28204 CVE-2023-32373 CVE-2023-23529 CVE-2023-28205 CVE-2023-28206

Tags: cve-2023-32409 cve-2023-28204 cve-2023-32373 cve-2023-23529 cve-2023-28205 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-23529	WebKit Type Confusion RCE in Apple iOS, iPadOS, macOS, and Safari	8.8	9%	KEV	Feb 27, 2023 KEV Feb 14, 2023
CVE-2023-32373 +2 related CVEs CVE-2023-32409 CVE-2023-28204	WebKit Use-After-Free Zero-Day in Apple iOS, Safari, macOS Enables Code Execution	8.8 group max	12%	KEV	Jun 23, 2023 KEV May 22, 2023
CVE-2023-28205	Use-After-Free in Apple WebKit (iOS, iPadOS, macOS, Safari) Enables Code Execution	8.8	27%	KEV	Apr 10, 2023 KEV Apr 10, 2023
CVE-2023-28206	Out-of-Bounds Write in Apple IOSurfaceAccelerator Allows Kernel-Level Code Execution	8.6	23%	KEV	Apr 10, 2023 KEV Apr 10, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  May 19, 2023 Zero-Day / Endpoint Security Apple on Thursday rolled out security updates to iOS, iPadOS, macOS, tvOS, watchOS, and the Safari web browser to address dozens of flaws, including three new zero-days that it said are being actively exploited in the wild. CVE-2023-32409 - A WebKit flaw that could be exploited by a malicious actor to break out of the Web Content sandbox.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.