{"id":"CVE-2023-41992","kind":"vulnerability","aliases":["CVE-2023-41992"],"related":[],"title":"The issue was addressed with improved checks","description":"The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.","summary":"A flaw in the kernel of Apple iOS, iPadOS, macOS and watchOS lets a local attacker gain higher privileges. CISA lists it as actively exploited in the wild.","severity":"high","cvss":7.8,"epss":null,"exploited":true,"exploited_at":"2023-09-25T00:00:00+00:00","products":[{"name":"Apple Multiple Products","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"apple ipados","fixed":["16.7"],"affected":"< 16.7","ecosystem":"vendor"},{"name":"apple ipados","fixed":[],"affected":"= 17.0","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["16.7"],"affected":"< 16.7","ecosystem":"vendor"},{"name":"apple iphone os","fixed":[],"affected":"= 17.0","ecosystem":"vendor"},{"name":"apple macos","fixed":["12.7"],"affected":">= 12.0, < 12.7","ecosystem":"vendor"},{"name":"apple macos","fixed":["13.6"],"affected":">= 13.0, < 13.6","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apple-devices","exploited","infrastructure","ios","ipados","macos","watchos"],"not_affected_if":["unpatched-builds-not-in-use"],"how_to_check":null,"fix":"Update Apple devices to the latest iOS, iPadOS, macOS and watchOS releases; the sources do not name the fixed versions.","status":"open","published_at":"2023-09-21T19:15:11+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T21:04:35+00:00","updated_at":"2026-10-23T22:29:04+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T21:04:35Z","model":"claude-haiku-5-5","output":{"fix":"Update Apple devices to the latest iOS, iPadOS, macOS and watchOS releases; the sources do not name the fixed versions.","reach":"local","impact":"high","summary":"A flaw in the kernel of Apple iOS, iPadOS, macOS and watchOS lets a local attacker gain higher privileges. CISA lists it as actively exploited in the wild.","category":"infrastructure","who_cares":["ios","ipados","macos","watchos","apple-devices"],"confidence":0.6,"needs_auth":"yes","worst_case":"local attacker escalates privileges to kernel level on the device","analyst_note":"Find the Apple security-updates page entry for CVE-2023-41992 to get the fixed OS versions and any user-interaction details.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unpatched-builds-not-in-use"],"user_interaction":"unknown","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000454,"input_tokens":2812,"output_tokens":345,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2023':9A,12A '-41992':10A,13A '12.7':82C '13.6':90C '16.7':84C,87C,121C 'abl':96C 'activ':63B,113C 'address':4A,71C 'appl':32B,46B,101C 'apple':14A,17A,19A,21A,24A,27A,29A 'apple-devic':31B 'attack':55B,93C 'awar':103C 'check':7A,74C 'cisa':59B 'cve':8A,11A 'devic':33B 'elev':98C 'exploit':34B,64B,114C 'fix':78C 'flaw':41B 'gain':56B 'higher':57B 'improv':6A,73C 'infrastructur':35B 'io':36B,47B,83C,118C,120C 'ipado':37B,48B,86C 'ipados':18A,20A 'iphone':22A,25A 'issu':2A,69C,76C,109C 'kernel':44B 'let':52B 'list':60B 'local':54B,92C 'maco':38B,49B,80C,88C 'macos':28A,30A 'may':94C,110C 'monterey':81C 'multiple':15A 'os':23A,26A 'privileg':58B,100C 'products':16A 'report':106C 'ventura':89C 'version':116C 'watcho':39B,51B 'wild':67B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2023-09-21T19:15:11+00:00","kev":{"dateAdded":"2023-09-25","dueDate":"2023-10-16","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2023-41992","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41992","severity":null,"published_at":"2023-09-25T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T12:39:23+00:00","note":null},{"source":"nvd","external_id":"CVE-2023-41992","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41992","severity":null,"published_at":"2023-09-21T19:15:11+00:00","modified_at":"2026-06-17T06:23:13+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}