How do I check whether I am affected by CVE-2023-32373?

Check the OS version under Settings > General > About (iOS/iPadOS) or Apple menu > About This Mac (macOS) and compare it to Apple's security notes for the fixed builds.

What is the fix for CVE-2023-32373?

Update iOS, iPadOS, macOS, tvOS, watchOS and Safari to the patched versions listed by Apple; CISA says to apply updates per vendor instructions.

Who is not affected by CVE-2023-32373?

Not affected if: fully-patched-devices.

Live › vulnerability › CVE-2023-32373

Go to dashboard

high8.8Exploited in the wildVendor

A use-after-free issue was addressed with improved memory management

A use-after-free bug in Apple's WebKit browser engine, present in iOS, iPadOS, macOS, tvOS, watchOS and Safari, lets a crafted web page run code. CISA lists it as actively exploited in the wild.

Summary written from the sources below. Check the originals before acting.

CVSS 3.x

8.8

high

scored by [email protected]

known so far5 of 6

missing: primary source

First public: May 22, 2023 UTC
Last modified: Jun 17, 2026
Status: open
Known exploitation: Listed in CISA KEV
Public exploit: None on GitHub
EPSS: not scored

First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.

Why it is high, and not just CVSS

Likelihood → · Impact ↓

critical

high

medium

high

medium

low

medium

low

Exploited: Yes, on CISA KEV since May 22, 2023.
Needs login: No.
Needs a special setup: No.
Reachable from: internet.
Worst case: Attacker runs code on the device after the victim loads a malicious web page.
CVSS said: 8.8. The facts above say critical; exploitation in the wild moves it to high.

Known exploitation

CISA KEV

Know the next one before it finds you.

Add to Slack

Live › vulnerability › CVE-2023-32373

Go to dashboard

high8.8Exploited in the wildVendor

A use-after-free issue was addressed with improved memory management

A use-after-free bug in Apple's WebKit browser engine, present in iOS, iPadOS, macOS, tvOS, watchOS and Safari, lets a crafted web page run code. CISA lists it as actively exploited in the wild.

Summary written from the sources below. Check the originals before acting.

CVSS 3.x

8.8

high

scored by [email protected]

known so far5 of 6

missing: primary source

First public: May 22, 2023 UTC
Last modified: Jun 17, 2026
Status: open
Known exploitation: Listed in CISA KEV
Public exploit: None on GitHub
EPSS: not scored

First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.

Why it is high, and not just CVSS

Likelihood → · Impact ↓

critical

high

medium

high

medium

low

medium

low

Exploited: Yes, on CISA KEV since May 22, 2023.
Needs login: No.
Needs a special setup: No.
Reachable from: internet.
Worst case: Attacker runs code on the device after the victim loads a malicious web page.
CVSS said: 8.8. The facts above say critical; exploitation in the wild moves it to high.

Known exploitation

CISA KEV

Know the next one before it finds you.

Add to Slack

Product	Ecosystem	Affected	Fixed in
Apple Multiple Products	vendor	–	–
apple safari	vendor	< 16.5	16.5
apple ipados	vendor	< 15.7.6	15.7.6
apple ipados	vendor	>= 16.0, < 16.5	16.5
apple iphone os	vendor	>= 15.0, < 15.7.6	15.7.6
apple iphone os	vendor	>= 16.0, < 16.5	16.5
apple macos	vendor	< 13.4	13.4
apple tvos	vendor	< 16.5	16.5
apple watchos	vendor	< 9.5	9.5
redhat enterprise linux	vendor	= 6.0	–
redhat enterprise linux	vendor	= 7.0	–
redhat enterprise linux	vendor	= 8.0	–
redhat enterprise linux	vendor	= 9.0	–
webkitgtk webkitgtk\+	vendor	< 2.42.3	2.42.3

A use-after-free issue was addressed with improved memory management

Why it is high, and not just CVSS

Known exploitation

Know the next one before it finds you.

A use-after-free issue was addressed with improved memory management

Why it is high, and not just CVSS

Known exploitation

Know the next one before it finds you.

Who is affected

How to check

The fix

Who had it, and when

What the sources say, verbatim

Sources