Apple Patches Actively Exploited iOS Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-42917+1 related CVE | WebKit Memory Corruption in Apple iOS, macOS, and Safari Enables Arbitrary Code Execution | 8.8 group max | 9% | KEV | KEV |
| CVE-2023-6345 | Integer Overflow in Google Chrome's Skia Enables Sandbox Escape (Actively Exploited) | 9.6 | 16% | KEV | KEV |
From the original article
1 min read at infosecurity-magazine.com
Apple has been forced to patch yet another pair of zero-day vulnerabilities, bringing the total for the year to 20. The tech giant said that the two bugs in its WebKit browser engine were being actively exploited in the wild. The first vulnerability, CVE-2023-42916, is found in a range of Apple products: iPhone XS and later, iPad Pro 12.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.