VulnerabilitycriticalExploited in the wild

Apple fixes WebKit 0-days under attack (CVE-2023-28204, CVE-2023-32373, CVE-2023-32409)

Help Net Securityby @zeljkazorzMay 19, 2023 · 00:00 UTC (May 19, 2023)1 min read5 · 2 reads

Read at helpnetsecurity.com

Analyze CVE-2023-28204 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-28204 CVE-2023-32373 CVE-2023-32409

Tags: cve-2023-28204 cve-2023-32373 cve-2023-32409 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-32373 +2 related CVEs CVE-2023-32409 CVE-2023-28204	WebKit Use-After-Free Zero-Day in Apple iOS, Safari, macOS Enables Code Execution	8.8 group max	12%	KEV	Jun 23, 2023 KEV May 22, 2023

From the original article

1 min read at helpnetsecurity.com

Apple has released security updates for iOS and iPadOS, macOS, tvOS and watchOS, delivering fixes for many vulnerabilities but, most importantly, for CVE-2023-32409, a WebKit 0-day that “may have been actively exploited.”

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.