CVE-2023-28204

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 3/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

CISA Known Exploited Vulnerability

Vendor / Product Apple — Multiple Products
Date Added 2023-05-22
Remediation Due 2023-06-12
https://support.apple.com/HT213757, https://support.apple.com/HT213758, https://support.apple.com/HT213761, https://support.apple.com/HT213762, https://support.apple.com/HT213764, https://support.apple.com/HT213765; https://nvd.nist.gov/vuln/detail/CVE-2023-28204

Bug Bounty Relevance

3 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

14.29%
Raw Score 0.142920
Percentile 96.6%
Date 2026-10-28

Intelligence Sources

kev ref →