7.8

CVE-2023-41974

Warnung
Medienbericht
Exploit
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An app may be able to execute arbitrary code with kernel privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iPadOS Version < 15.8.7
Apple ≫ iPadOS Version >= 16.0 < 17.0
Apple ≫ iPhone OS Version < 15.8.7
Apple ≫ iPhone OS Version >= 16.0 < 17.0

05.03.2026: CISA Known Exploited Vulnerabilities (KEV) Catalog

Apple iOS and iPadOS Use-After-Free Vulnerability

Schwachstelle

Apple iOS and iPadOS contain a use-after-free vulnerability. An app may be able to execute arbitrary code with kernel privileges.

Beschreibung

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.41% 0.691
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
18.03.2026 08:35
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
17.03.2026 22:20
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
06.03.2026 09:46
https://support.apple.com/en-us/HT213938
Vendor Advisory
Release Notes
https://support.apple.com/kb/HT213938
Vendor Advisory
Release Notes
https://support.apple.com/en-us/120949
Vendor Advisory
Release Notes
https://cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kit
Third Party Advisory
Exploit
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41974
US Government Resource
https://support.apple.com/en-us/126632
Vendor Advisory
Release Notes