CVE-2023-32373

Published: Jun 23, 2023Modified: Jun 17, 2026CISA KEV

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Affected (13)

Products: Apple: Ipados, Iphone Os, Macos, Safari, Tvos, Watchos · Redhat: Enterprise Linux · Webkitgtk: Webkitgtk+

6 products

1 product

Enterprise Linux

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 15.7.6
Apple Ipados	From 16.0 to 16.5
Apple Iphone Os	From 15.0 to 15.7.6
Apple Iphone Os	From 16.0 to 16.5
Apple Macos	Before 13.4
Apple Safari	Before 16.5
Apple Tvos	Before 16.5
Apple Watchos	Before 9.5

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux	Version 9.0

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Webkitgtk Webkitgtk+	Before 2.42.3

Related CWEs

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (15)

https://security.gentoo.org/glsa/202401-04

Source: product-security@apple.com

Third Party Advisory

https://support.apple.com/en-us/HT213757

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213758

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213761

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213762

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213764

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213765

Source: product-security@apple.com

Release NotesVendor Advisory

https://security.gentoo.org/glsa/202401-04

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.apple.com/en-us/HT213757

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213758

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213761

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213762

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213764

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213765

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-32373

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.