Use-After-Free Vulnerability in Apple Operating Systems
CVE-2023-41071

7.8HIGH

Key Information:

Vendor
Apple
Status
iOS and iPadOS
macOS
tvOS
watchOS
Vendor
CVE Published:
27 September 2023

Summary

A use-after-free vulnerability was identified in Apple operating systems that could allow an application to execute arbitrary code with kernel privileges. This issue stemmed from improper memory management, which has now been addressed in the latest updates for iOS 17, iPadOS 17, tvOS 17, watchOS 10, and macOS Ventura 13.6. Users are advised to immediately update their devices to mitigate potential security risks.

Affected Version(s)

iOS and iPadOS < 17

macOS < 13.6

tvOS < 17

References

https://support.apple.com/en-us/HT213938
https://support.apple.com/en-us/HT213931
https://support.apple.com/en-us/HT213936

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.