In CISA KEVNot scored
CVE-2023-43000
Apple Multiple products Use-After-Free Vulnerability
AppleMultiple Products
Status
- Exploited in the wild
- In CISA KEV since 5 Mar
Federal deadlineThu 26 Mar, 23:59 UTC
Passed 212 days ago
CISA KEV · added 5 Mar
Exploit probabilityEPSSchecked 11 Oct
4.0%probability of exploitation in the next 30 days
Higher than 90% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Coverage 8 articles · 5 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Wed 4 Mar · 14:38 UTC | The Hacker News | Coruna iOS Exploit Kit uses 23 exploits including CVE-2024-23222 |
| Thu 5 Mar · 21:24 UTC | CISA | Apple CVE-2023-43000 Use-After-Free Active Exploitation Patch Now |
| Thu 5 Mar · 21:44 UTC | CISA | CVE-2023-43000 Use-After-Free flaw hits Apple Safari on macOS iOS |
| Fri 6 Mar · 09:57 UTC | Security Affairs | CISA Adds CVEs to KEV for Apple Rockwell and Hikvision Flaws |
| Thu 12 Mar · 11:08 UTC | The Hacker News | Apple Issues Security Updates for Older iOS Devices Targeted by Coruna WebKit Exploit |
| Thu 12 Mar · 15:11 UTC | SecurityWeek | Apple Updates Older iOS Versions to Patch Coruna Exploits |
| Thu 12 Mar · 15:41 UTC | Security Affairs | Apple issues emergency fixes for Coruna flaws in older iOS versions |
| Thu 12 Mar · 18:16 UTC | Malwarebytes | Apple patches Coruna exploit kit flaws for older iOS versions |
- Apple patches Coruna exploit kit flaws for older iOS versionsMalwarebytes
- Apple issues emergency fixes for Coruna flaws in older iOS versionsSecurity Affairs · mentions it in passing
- Apple Updates Older iOS Versions to Patch Coruna ExploitsSecurityWeek · mentions it in passing
- Apple Issues Security Updates for Older iOS Devices Targeted by Coruna WebKit ExploitThe Hacker News · mentions it in passing
- CISA Adds CVEs to KEV for Apple Rockwell and Hikvision FlawsSecurity Affairs
- CVE-2023-43000 Use-After-Free flaw hits Apple Safari on macOS iOSCISA · official notice
- Apple CVE-2023-43000 Use-After-Free Active Exploitation Patch NowCISA · official notice
- Coruna iOS Exploit Kit uses 23 exploits including CVE-2024-23222The Hacker News · first in our coverage · mentions it in passing