Dashboard / CVE-2023-43000

CVE-2023-43000

HIGH CISA KEV
ACT NOW Priority: 0.36 BB Relevance: 68/100
Published: 2025-11-05 Modified: 2026-10-28 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: Required
S: Unchanged
C: High
I: High
A: High

Description

Apple macOS, iOS, iPadOS, and Safari 16.6 contain a use-after-free vulnerability due to the processing of maliciously crafted web content that may lead to memory corruption.

CISA Known Exploited Vulnerability

Vendor / Product Apple — Multiple Products
Date Added 2026-03-05
Remediation Due 2026-03-26
https://support.apple.com/en-us/120324 ; https://support.apple.com/en-us/120331 ; https://support.apple.com/en-us/120338 ; https://nvd.nist.gov/vuln/detail/CVE-2023-43000

Weakness Classification (1)

Affected Software (12)

VendorProductVersion
apple ipados < 15.8.7
apple ipados 16.0 – 16.6
apple ipados < 15.8.7
apple ipados 16.0 – 16.6
apple iphone_os < 15.8.7
apple iphone_os 16.0 – 16.6
apple iphone_os < 15.8.7
apple iphone_os 16.0 – 16.6
apple macos < 13.5
apple macos < 13.5
apple safari < 16.6
apple safari < 16.6

References & Advisories (6)

https://support.apple.com/en-us/120324
Release Notes Vendor Advisory
https://support.apple.com/en-us/120331
Release Notes Vendor Advisory
https://support.apple.com/en-us/120338
Release Notes Vendor Advisory
https://support.apple.com/en-us/126632
Release Notes Vendor Advisory

Bug Bounty Relevance

68 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ Known exploited (KEV)

CVSS Score

8.8 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

4.04%
Raw Score 0.040420
Percentile 90.6%
Date 2026-10-28

Intelligence Sources

kev ref →
nvd ref →

External Links