Veille CVE
CVE-2023-41974
7.8 Élevée Exploitée activementCatalogue CISA KEV — Apple iOS and iPadOS Use-After-Free Vulnerability
Ajoutée le 05/03/2026 · Échéance de correction (agences US) : 26/03/2026
Action requise : Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Description
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An app may be able to execute arbitrary code with kernel privileges.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 7.8 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 3.1 | 7.8 Élevée | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Faiblesses (CWE)
Références
- https://support.apple.com/en-us/120949 Release NotesVendor Advisory
- https://support.apple.com/en-us/126632 Release NotesVendor Advisory
- https://support.apple.com/en-us/HT213938 Release NotesVendor Advisory
- https://support.apple.com/kb/HT213938 Release NotesVendor Advisory
- https://cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kit ExploitThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41974 US Government Resource