CVE-2023-41974

HIGHCISA KEV

7.8

Descripcion

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An app may be able to execute arbitrary code with kernel privileges.

Detalles CVE

Puntuacion CVSS v3.17.8

SeveridadHIGH

Vector CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vector de ataqueLOCAL

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioREQUIRED

Publicado1/10/2024

Ultima modificacion3/12/2026

Fuentekev

Avistamientos honeypot0

CISA KEV

VendedorApple

ProductoiOS and iPadOS

Nombre vulnerabilidadApple iOS and iPadOS Use-After-Free Vulnerability

Fecha inclusion KEV2026-03-05

Fecha limite remediacion2026-03-26

Uso en ransomwareUnknown

Productos afectados

apple:ipadosapple:iphone_os

Debilidades (CWE)

CWE-416CWE-416

Referencias

https://support.apple.com/en-us/120949(product-security@apple.com)

https://support.apple.com/en-us/126632(product-security@apple.com)

https://support.apple.com/en-us/HT213938(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/kb/HT213938(af854a3a-2127-422b-91ae-364da2661108)

https://cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kit(134c704f-9b21-4f2e-91b3-4a467353bcc0)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41974(134c704f-9b21-4f2e-91b3-4a467353bcc0)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.