CVE-2023-32435

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 5/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

CISA Known Exploited Vulnerability

Vendor / Product Apple — Multiple Products
Date Added 2023-06-23
Remediation Due 2023-07-14
https://support.apple.com/en-us/HT213670, https://support.apple.com/en-us/HT213671, https://support.apple.com/en-us/HT213676, https://support.apple.com/en-us/HT213811; https://nvd.nist.gov/vuln/detail/CVE-2023-32435

Bug Bounty Relevance

5 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

22.95%
Raw Score 0.229510
Percentile 97.7%
Date 2026-10-28

Intelligence Sources

kev ref →