{"id":"CVE-2023-42824","kind":"vulnerability","aliases":["CVE-2023-42824"],"related":[],"title":"The issue was addressed with improved checks","description":"The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.","summary":"Apple iOS and iPadOS contain a kernel flaw that lets a local app or user escalate privileges. An attacker who already has code running on the device can gain kernel-level control.","severity":"high","cvss":7.8,"epss":null,"exploited":true,"exploited_at":"2023-10-05T00:00:00+00:00","products":[{"name":"Apple iOS and iPadOS","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"apple ipados","fixed":["16.7.1"],"affected":"< 16.7.1","ecosystem":"vendor"},{"name":"apple ipados","fixed":["17.0.3"],"affected":">= 17.0, < 17.0.3","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["16.7.1"],"affected":"< 16.7.1","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["17.0.3"],"affected":">= 17.0, < 17.0.3","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","infrastructure","ios","ipados","mobile-devices"],"not_affected_if":["fully-patched-devices"],"how_to_check":"Settings > General > About shows the iOS or iPadOS version; compare it against the fixed release in Apple's security notes.","fix":"Update iOS and iPadOS to a release that includes Apple's fix for CVE-2023-42824; the sources do not name the fixed version.\nFollow CISA's instruction to apply the vendor mitigations or stop using the affected product if none exist.","status":"open","published_at":"2023-10-04T19:15:10+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T21:04:28+00:00","updated_at":"2026-10-23T22:29:04+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T21:04:28Z","model":"claude-haiku-5-5","output":{"fix":"Update iOS and iPadOS to a release that includes Apple's fix for CVE-2023-42824; the sources do not name the fixed version.\nFollow CISA's instruction to apply the vendor mitigations or stop using the affected product if none exist.","reach":"local","impact":"high","summary":"Apple iOS and iPadOS contain a kernel flaw that lets a local app or user escalate privileges. An attacker who already has code running on the device can gain kernel-level control.","category":"infrastructure","who_cares":["ios","ipados","mobile-devices"],"confidence":0.6,"needs_auth":"yes","worst_case":"Attacker with local code execution gains kernel privileges on the device","analyst_note":"Find Apple's security advisory for CVE-2023-42824 to confirm the fixed iOS and iPadOS versions and the mitigation text, since the sources give neither.","how_to_check":"Settings > General > About shows the iOS or iPadOS version; compare it against the fixed release in Apple's security notes.\nunknown","needs_analyst":true,"not_affected_if":["fully-patched-devices"],"user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000491,"input_tokens":2811,"output_tokens":420,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2023':9A,12A '-42824':10A,13A '16.6':115C '16.7.1':81C,84C 'abl':90C 'activ':107C 'address':4A,71C 'alreadi':55B 'and':16A 'app':47B 'appl':35B,95C 'apple':14A,18A,20A,22A,25A 'attack':53B,87C 'awar':97C 'check':7A,74C 'code':57B 'contain':39B 'control':67B 'cve':8A,11A 'devic':34B,61B 'elev':92C 'escal':50B 'exploit':28B,108C 'fix':78C 'flaw':42B 'gain':63B 'improv':6A,73C 'infrastructur':29B 'io':30B,36B,80C,112C,114C 'ios':15A 'ipado':31B,38B,83C 'ipados':17A,19A,21A 'iphone':23A,26A 'issu':2A,69C,76C,103C 'kernel':41B,65B 'kernel-level':64B 'let':44B 'level':66B 'local':46B,86C 'may':88C,104C 'mobil':33B 'mobile-devic':32B 'os':24A,27A 'privileg':51B,94C 'report':100C 'run':58B 'user':49B 'version':110C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2023-10-04T19:15:10+00:00","kev":{"dateAdded":"2023-10-05","dueDate":"2023-10-26","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2023-42824","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-42824","severity":null,"published_at":"2023-10-05T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T12:39:23+00:00","note":null},{"source":"nvd","external_id":"CVE-2023-42824","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-42824","severity":null,"published_at":"2023-10-04T19:15:10+00:00","modified_at":"2026-06-17T06:24:36+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}