← Back to browse · API

CVE-2023-32373

Severity
HIGH
CVSS
8.8
EPSS
0.12172
Risk score
64.46
CISA KEV
Yes
PoC
No
Published
2023-06-23
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2023-36617, GHSA-3X5R-C923-F923
Products
Apple:Multiple Products, Apple:Safari unspecified <16.5, Apple:iOS and iPadOS unspecified <15.7, Apple:iOS and iPadOS unspecified <16.5, Apple:macOS unspecified <13.4, Apple:tvOS unspecified <16.5, Apple:watchOS unspecified <9.5
Sources
cisa.gov CVE-2023-32373
euvd EUVD-2023-36617

Description

A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

References