{"id":"CVE-2023-41974","kind":"vulnerability","aliases":["CVE-2023-41974"],"related":[],"title":"A use-after-free issue was addressed with improved memory management","description":"Apple iOS and iPadOS contain a use-after-free vulnerability. An app may be able to execute arbitrary code with kernel privileges.\n\nCISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","summary":"A use-after-free bug in Apple iOS and iPadOS lets a malicious app run code with kernel privileges. CISA lists it as actively exploited in the wild.","severity":"high","cvss":7.8,"epss":null,"exploited":true,"exploited_at":"2026-03-05T00:00:00+00:00","products":[{"name":"Apple iOS and iPadOS","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"apple ipados","fixed":["15.8.7"],"affected":"< 15.8.7","ecosystem":"vendor"},{"name":"apple ipados","fixed":["17.0"],"affected":">= 16.0, < 17.0","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["15.8.7"],"affected":"< 15.8.7","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["17.0"],"affected":">= 16.0, < 17.0","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apple-devices","exploited","ios","ipados","mdm","vendor"],"not_affected_if":["unknown"],"how_to_check":"Settings > General > About shows the iOS or iPadOS version; compare it against Apple's fixed release listed in the advisory.","fix":"Update iOS or iPadOS to a version Apple lists as fixing CVE-2023-41974; CISA says to apply the vendor mitigations or stop using the product if none exist.","status":"open","published_at":"2024-01-10T22:15:49+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:39:14+00:00","updated_at":"2026-10-23T23:44:51+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-23T20:39:14Z","model":"claude-haiku-5-5","output":{"fix":"Update iOS or iPadOS to a version Apple lists as fixing CVE-2023-41974; CISA says to apply the vendor mitigations or stop using the product if none exist.\nunknown","reach":"local","summary":"A use-after-free bug in Apple iOS and iPadOS lets a malicious app run code with kernel privileges. CISA lists it as actively exploited in the wild.","category":"vendor","who_cares":["ios","ipados","apple-devices","mdm"],"confidence":0.6,"needs_auth":"no","worst_case":"A malicious app gains kernel privileges, enabling full device compromise and access to stored data.","analyst_note":"Sources do not name fixed iOS/iPadOS versions or affected ranges; check Apple's security releases page for the fixed build and whether the exploit needed a specific device or OS version.","how_to_check":"Settings > General > About shows the iOS or iPadOS version; compare it against Apple's fixed release listed in the advisory.\nunknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000455,"input_tokens":2536,"output_tokens":403,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-01':105C '-2023':14A,17A '-41974':15A,18A '22':104C 'abl':85C 'action':95C 'activ':65B 'address':8A 'and':21A 'app':55B,82C 'appl':34B,48B,70C 'apple':19A,23A,25A,27A,30A 'apple-devic':33B 'appli':96C 'applic':102C 'arbitrari':88C 'bod':103C 'bug':46B 'cisa':61B,93C 'cloud':108C 'code':57B,89C 'contain':74C 'cve':13A,16A 'devic':35B 'discontinu':111C 'execut':87C 'exploit':36B,66B 'follow':101C 'free':5A,45B,79C 'guidanc':106C 'improv':10A 'instruct':100C 'io':37B,49B,71C 'ios':20A 'ipado':38B,51B,73C 'ipados':22A,24A,26A 'iphone':28A,31A 'issu':6A 'kernel':59B,91C 'let':52B 'list':62B 'malici':54B 'manag':12A 'may':83C 'mdm':39B 'memori':11A 'mitig':97C,117C 'os':29A,32A 'per':98C 'privileg':60B,92C 'product':115C 'requir':94C 'run':56B 'servic':109C 'unavail':119C 'use':3A,43B,77C,112C 'use-after-fre':2A,42B,76C 'vendor':40B,99C 'vulner':80C 'wild':69B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2024-01-10T22:15:49+00:00","kev":{"dateAdded":"2026-03-05","dueDate":"2026-03-26","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2023-41974","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41974","severity":null,"published_at":"2026-03-05T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T14:39:38+00:00","note":null},{"source":"nvd","external_id":"CVE-2023-41974","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41974","severity":null,"published_at":"2024-01-10T22:15:49+00:00","modified_at":"2026-06-17T06:23:10+00:00","first_seen_at":"2026-10-23T23:44:51+00:00","fetched_at":"2026-10-23T23:44:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}