Live › vulnerability › CVE-2023-43000
Go to dashboardApple macOS, iOS, iPadOS and Safari 16.6 have a use-after-free bug triggered by processing maliciously crafted web content. An attacker can corrupt memory by getting a victim to load a page, which can lead to code execution.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 5h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Apple Multiple Products | vendor | – | – |
| apple safari | vendor | < 16.6 | 16.6 |
| apple ipados | vendor | < 15.8.7 | 15.8.7 |
| apple ipados | vendor | >= 16.0, < 16.6 | 16.6 |
| apple iphone os | vendor | < 15.8.7 | 15.8.7 |
| apple iphone os |
| vendor |
| >= 16.0, < 16.6 |
| 16.6 |
| apple macos | vendor | < 13.5 | 13.5 |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Apple macOS, iOS, iPadOS, and Safari 16.6 contain a use-after-free vulnerability due to the processing of maliciously crafted web content that may lead to memory corruption.
CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2023-43000")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.