{"id":"CVE-2023-32373","kind":"vulnerability","aliases":["CVE-2023-32373"],"related":[],"title":"A use-after-free issue was addressed with improved memory management","description":"Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.\n\nCISA required action: Apply updates per vendor instructions.","summary":"A use-after-free bug in Apple's WebKit browser engine, present in iOS, iPadOS, macOS, tvOS, watchOS and Safari, lets a crafted web page run code. CISA lists it as actively exploited in the wild.","severity":"high","cvss":8.8,"epss":null,"exploited":true,"exploited_at":"2023-05-22T00:00:00+00:00","products":[{"name":"Apple Multiple Products","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"apple safari","fixed":["16.5"],"affected":"< 16.5","ecosystem":"vendor"},{"name":"apple ipados","fixed":["15.7.6"],"affected":"< 15.7.6","ecosystem":"vendor"},{"name":"apple ipados","fixed":["16.5"],"affected":">= 16.0, < 16.5","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["15.7.6"],"affected":">= 15.0, < 15.7.6","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["16.5"],"affected":">= 16.0, < 16.5","ecosystem":"vendor"},{"name":"apple macos","fixed":["13.4"],"affected":"< 13.4","ecosystem":"vendor"},{"name":"apple tvos","fixed":["16.5"],"affected":"< 16.5","ecosystem":"vendor"},{"name":"apple watchos","fixed":["9.5"],"affected":"< 9.5","ecosystem":"vendor"},{"name":"redhat enterprise linux","fixed":[],"affected":"= 6.0","ecosystem":"vendor"},{"name":"redhat enterprise linux","fixed":[],"affected":"= 7.0","ecosystem":"vendor"},{"name":"redhat enterprise linux","fixed":[],"affected":"= 8.0","ecosystem":"vendor"},{"name":"redhat enterprise linux","fixed":[],"affected":"= 9.0","ecosystem":"vendor"},{"name":"webkitgtk webkitgtk\\+","fixed":["2.42.3"],"affected":"< 2.42.3","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apple","exploited","ios","macos","safari","vendor","webkit"],"not_affected_if":["fully-patched-devices"],"how_to_check":"Check the OS version under Settings > General > About (iOS/iPadOS) or Apple menu > About This Mac (macOS) and compare it to Apple's security notes for the fixed builds.","fix":"Update iOS, iPadOS, macOS, tvOS, watchOS and Safari to the patched versions listed by Apple; CISA says to apply updates per vendor instructions.","status":"open","published_at":"2023-05-22T00:00:00+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T21:06:42+00:00","updated_at":"2026-10-23T22:29:04+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-23T21:06:42Z","model":"claude-haiku-5-5","output":{"fix":"Update iOS, iPadOS, macOS, tvOS, watchOS and Safari to the patched versions listed by Apple; CISA says to apply updates per vendor instructions.\nunknown","reach":"internet","impact":"high","summary":"A use-after-free bug in Apple's WebKit browser engine, present in iOS, iPadOS, macOS, tvOS, watchOS and Safari, lets a crafted web page run code. CISA lists it as actively exploited in the wild.","category":"vendor","who_cares":["apple","ios","macos","safari","webkit"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker runs code on the device after the victim loads a malicious web page.","analyst_note":"Find the exact fixed OS and Safari build numbers in Apple's security release notes for CVE-2023-32373 and confirm them against the CISA KEV entry.","how_to_check":"Check the OS version under Settings > General > About (iOS/iPadOS) or Apple menu > About This Mac (macOS) and compare it to Apple's security notes for the fixed builds.\nunknown","needs_analyst":true,"not_affected_if":["fully-patched-devices"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000511,"input_tokens":2868,"output_tokens":449,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2023':14A,17A '-32373':15A,18A 'action':155C 'activ':93B 'address':8A 'appl':54B,68B,98C,139C,144C 'apple':19A,22A,24A,26A,28A,31A,34A,36A,38A 'appli':156C 'browser':71B 'bug':66B 'cisa':89B,153C 'code':88B,117C 'contain':107C 'content':124C 'could':127C 'craft':84B,122C 'cve':13A,16A 'engin':72B 'enterprise':41A,44A,47A,50A 'execut':118C 'exploit':55B,94B 'free':5A,65B,112C 'html':129C,151C 'impact':128C 'improv':10A 'includ':134C 'instruct':160C 'io':56B,75B,99C 'ipado':76B,100C 'ipados':25A,27A 'iphone':29A,32A 'issu':6A 'lead':115C 'let':82B 'limit':137C 'linux':42A,45A,48A,51A 'list':90B 'maco':57B,77B,101C 'macos':35A 'malici':121C 'manag':12A 'memori':11A 'multiple':20A 'non':143C 'non-appl':142C 'os':30A,33A 'page':86B 'parser':130C 'per':158C 'present':73B 'process':120C,152C 'product':145C 'products':21A 'redhat':40A,43A,46A,49A 'reli':147C 'requir':154C 'run':87B 'safari':23A,58B,81B,105C,140C 'tvos':37A,78B,102C 'updat':157C 'use':3A,63B,110C,132C 'use-after-fre':2A,62B,109C 'vendor':59B,159C 'vulner':113C,126C 'watcho':79B,103C 'watchos':39A 'web':85B,123C 'webkit':60B,70B,106C,133C,149C 'webkitgtk':52A,53A 'wild':97B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2023-05-22T00:00:00+00:00","kev":{"dateAdded":"2023-05-22","dueDate":"2023-06-12","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2023-32373","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-32373","severity":null,"published_at":"2023-05-22T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T17:39:56+00:00","note":null},{"source":"nvd","external_id":"CVE-2023-32373","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32373","severity":null,"published_at":"2023-06-23T18:15:12+00:00","modified_at":"2026-06-17T05:58:42+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}