CVE-2023-28205

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 5/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Apple iOS, iPadOS, macOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

CISA Known Exploited Vulnerability

Vendor / Product Apple — Multiple Products
Date Added 2023-04-10
Remediation Due 2023-05-01
https://support.apple.com/en-us/HT213720,https://support.apple.com/en-us/HT213721,https://support.apple.com/en-us/HT213722,https://support.apple.com/en-us/HT213723; https://nvd.nist.gov/vuln/detail/CVE-2023-28205

Bug Bounty Relevance

5 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

27.08%
Raw Score 0.270760
Percentile 98.0%
Date 2026-10-28

Intelligence Sources

kev ref →