Back to CVE Browser

CVE-2023-42824

🔥 Known Exploited (CISA KEV)HIGH

7.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-10-04

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.

Affected Platforms (CPE)

💻

Apple

Ipados

< 16.7.1>= 17.0 and < 17.0.3

💻

Apple

Iphone Os

< 16.7.1>= 17.0 and < 17.0.3

References & Advisories

🔗 https://support.apple.com/en-us/HT213972

🔗 https://support.apple.com/en-us/HT213972

🔗 https://support.apple.com/kb/HT213961

🔗 https://support.apple.com/kb/HT213972

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-42824

Related Vulnerabilities

CVE-2026-437466.5

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS ...

CVE-2026-437456.5

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iP...

CVE-2026-437434.7

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5...

CVE-2026-437426.5

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS ...