Exploit / PoCcriticalExploited in the wild

Zero-Day Alert: Apple Releases Patches for Actively Exploited Flaws in iOS, macOS, and Safari

The Hacker Newsby @TheHackersNewsJul 11, 2023 · 03:31 UTC (Jul 11, 2023)3 min read3 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-32434 CVE-2023-32435 CVE-2023-32439 CVE-2023-23529 CVE-2023-28205 CVE-2023-28206 CVE-2023-32409 CVE-2023-28204 CVE-2023-32373

Tags: cve-2023-32434 cve-2023-32435 cve-2023-32439 cve-2023-23529 cve-2023-28205 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-23529	WebKit Type Confusion RCE in Apple iOS, iPadOS, macOS, and Safari	8.8	9%	KEV	Feb 27, 2023 KEV Feb 14, 2023
CVE-2023-32439 +5 related CVEs CVE-2023-32435 CVE-2023-32373 CVE-2023-32409 CVE-2023-32434 CVE-2023-28204	Type Confusion in Apple WebKit (Safari, iOS, iPadOS, macOS) Enables Code Execution	8.8 group max	24%	KEV	Jun 23, 2023 KEV Jun 23, 2023
CVE-2023-28205	Use-After-Free in Apple WebKit (iOS, iPadOS, macOS, Safari) Enables Code Execution	8.8	27%	KEV	Apr 10, 2023 KEV Apr 10, 2023
CVE-2023-28206	Out-of-Bounds Write in Apple IOSurfaceAccelerator Allows Kernel-Level Code Execution	8.6	23%	KEV	Apr 10, 2023 KEV Apr 10, 2023

From the original article

3 min read at thehackernews.com

 Ravie Lakshmanan  Jun 22, 2023 Vulnerability / Endpoint Security Apple on Wednesday released a slew of updates for iOS, iPadOS, macOS, watchOS, and Safari browser to address a set of flaws it said were actively exploited in the wild. This includes a pair of zero-days that have been weaponized in a mobile surveillance campaign called Operation Triangulation that has been active since 2019.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.