CVE-2023-42917

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 2/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

CISA Known Exploited Vulnerability

Vendor / Product Apple — Multiple Products
Date Added 2023-12-04
Remediation Due 2023-12-25
https://support.apple.com/en-us/HT214031, https://support.apple.com/en-us/HT214032, https://support.apple.com/en-us/HT214033 ; https://nvd.nist.gov/vuln/detail/CVE-2023-42917

Bug Bounty Relevance

2 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

9.29%
Raw Score 0.092950
Percentile 95.4%
Date 2026-10-28

Intelligence Sources

kev ref →