CVE-2023-41974

HIGHCISA KEV

7.8

Beschreibung

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An app may be able to execute arbitrary code with kernel privileges.

CVE Details

CVSS v3.1 Bewertung7.8

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AngriffsvektorLOCAL

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionREQUIRED

Veroffentlicht1/10/2024

Zuletzt geandert3/12/2026

Quellekev

Honeypot-Sichtungen0

CISA KEV

HerstellerApple

ProduktiOS and iPadOS

SchwachstellennameApple iOS and iPadOS Use-After-Free Vulnerability

KEV Aufnahmedatum2026-03-05

Behebungsfrist2026-03-26

Ransomware-NutzungUnknown

Betroffene Produkte

apple:ipadosapple:iphone_os

Schwachen (CWE)

CWE-416CWE-416

Referenzen

https://support.apple.com/en-us/120949(product-security@apple.com)

https://support.apple.com/en-us/126632(product-security@apple.com)

https://support.apple.com/en-us/HT213938(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/kb/HT213938(af854a3a-2127-422b-91ae-364da2661108)

https://cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kit(134c704f-9b21-4f2e-91b3-4a467353bcc0)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41974(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.