{"id":"CVE-2023-32439","kind":"vulnerability","aliases":["CVE-2023-32439"],"related":[],"title":"A type confusion issue was addressed with improved checks","description":"Apple iOS, iPadOS, macOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.\n\nCISA required action: Apply updates per vendor instructions.","summary":"A type confusion bug in Apple's WebKit engine, used by iOS, iPadOS, macOS and Safari, lets crafted web content run code. Anyone who can get a victim to load a malicious page can take over the browser or app that renders it.","severity":"high","cvss":8.8,"epss":null,"exploited":true,"exploited_at":"2023-06-23T00:00:00+00:00","products":[{"name":"Apple Multiple Products","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"apple safari","fixed":["16.5.1"],"affected":"< 16.5.1","ecosystem":"vendor"},{"name":"apple ipados","fixed":["15.7.7"],"affected":"< 15.7.7","ecosystem":"vendor"},{"name":"apple ipados","fixed":["16.5.1"],"affected":">= 16.0, < 16.5.1","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["15.7.7"],"affected":"< 15.7.7","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["16.5.1"],"affected":">= 16.0, < 16.5.1","ecosystem":"vendor"},{"name":"apple macos","fixed":["13.4.1"],"affected":">= 13.0, < 13.4.1","ecosystem":"vendor"},{"name":"webkitgtk webkitgtk\\+","fixed":["2.42.3"],"affected":"< 2.42.3","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","ios","ipados","macos","safari","vendor","webkit"],"not_affected_if":["fully-patched-devices"],"how_to_check":"Check the device OS version under Settings > General > About (iOS/iPadOS) or Apple menu > About This Mac (macOS) and compare it with the fixed versions in Apple's advisory.","fix":"Update iOS, iPadOS, macOS and Safari to a release that includes Apple's fix; CISA says to apply updates per vendor instructions.","status":"open","published_at":"2023-06-23T00:00:00+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T21:06:29+00:00","updated_at":"2026-10-23T22:29:04+00:00","category":"vendor","confidence":0.7,"triage":{"at":"2026-10-23T21:06:29Z","model":"claude-haiku-5-5","output":{"fix":"Update iOS, iPadOS, macOS and Safari to a release that includes Apple's fix; CISA says to apply updates per vendor instructions.\nunknown","reach":"internet","impact":"high","summary":"A type confusion bug in Apple's WebKit engine, used by iOS, iPadOS, macOS and Safari, lets crafted web content run code. Anyone who can get a victim to load a malicious page can take over the browser or app that renders it.","category":"vendor","who_cares":["ios","ipados","macos","safari","webkit"],"confidence":0.7,"needs_auth":"no","worst_case":"Attacker runs code in the browser or app after a victim opens a crafted page.","analyst_note":"Find the fixed iOS/macOS/Safari versions in Apple's security advisory for CVE-2023-32439 and confirm they are listed as exploited in the wild.","how_to_check":"Check the device OS version under Settings > General > About (iOS/iPadOS) or Apple menu > About This Mac (macOS) and compare it with the fixed versions in Apple's advisory.\nunknown","needs_analyst":true,"not_affected_if":["fully-patched-devices"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000508,"input_tokens":2856,"output_tokens":444,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2023':11A,14A '-32439':12A,15A 'action':137C 'address':6A 'anyon':64B 'app':81B 'appl':47B,84C,121C,126C 'apple':16A,19A,21A,23A,25A,28A,31A 'appli':138C 'browser':79B 'bug':45B 'check':9A 'cisa':135C 'code':63B,99C 'confus':3A,44B,94C 'contain':91C 'content':61B,106C 'could':109C 'craft':59B,104C 'cve':10A,13A 'engin':50B 'execut':100C 'exploit':35B 'get':67B 'html':111C,133C 'impact':110C 'improv':8A 'includ':116C 'instruct':142C 'io':36B,53B,85C 'ipado':37B,54B,86C 'ipados':22A,24A 'iphone':26A,29A 'issu':4A 'lead':97C 'let':58B 'limit':119C 'load':71B 'maco':38B,55B,87C 'macos':32A 'malici':73B,103C 'multiple':17A 'non':125C 'non-appl':124C 'os':27A,30A 'page':74B 'parser':112C 'per':140C 'process':102C,134C 'product':127C 'products':18A 'reli':129C 'render':83B 'requir':136C 'run':62B 'safari':20A,39B,57B,89C,122C 'take':76B 'type':2A,43B,93C 'updat':139C 'use':51B,114C 'vendor':40B,141C 'victim':69B 'vulner':95C,108C 'web':60B,105C 'webkit':41B,49B,90C,115C,131C 'webkitgtk':33A,34A","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2023-06-23T00:00:00+00:00","kev":{"dateAdded":"2023-06-23","dueDate":"2023-07-14","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2023-32439","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-32439","severity":null,"published_at":"2023-06-23T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T20:35:34+00:00","note":null},{"source":"nvd","external_id":"CVE-2023-32439","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32439","severity":null,"published_at":"2023-06-23T18:15:13+00:00","modified_at":"2026-06-17T05:58:50+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}