VulnerabilitycriticalExploited in the wild

Apple Rolls Out Security Patches for Actively Exploited iOS Zero

The Hacker Newsby @TheHackersNewsOct 11, 2023 · 03:55 UTC (Oct 11, 2023)2 min read5 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-42824 CVE-2023-5217 CVE-2023-41991 CVE-2023-41992 CVE-2023-41993

Tags: cve-2023-42824 cve-2023-5217 cve-2023-41991 cve-2023-41992 cve-2023-41993 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-41993 +2 related CVEs CVE-2023-41992 CVE-2023-41991	WebKit Code Execution Flaw in Apple iOS, iPadOS, macOS, and Safari	8.8 group max	24%	KEV	Sep 21, 2023 KEV Sep 25, 2023
CVE-2023-42824	Kernel Privilege Escalation in Apple iOS and iPadOS (Actively Exploited)	7.8	<1%	KEV	Oct 4, 2023 KEV Oct 5, 2023
CVE-2023-5217	Heap Buffer Overflow in Google Chromium libvpx (CVE-2023-5217) Added to CISA KEV	8.8	49%	KEVPoC	Sep 28, 2023 KEV Oct 2, 2023

From the original article

2 min read at thehackernews.com

Apple on Wednesday rolled out security patches to address a new zero-day flaw in iOS and iPadOS that it said has come under active exploitation in the wild. Tracked as CVE-2023-42824 , the kernel vulnerability could be abused by a local attacker to elevate their privileges. The iPhone maker said it addressed the problem with improved checks.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.