CVE-2023-28206
KEVApple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability
Description
Apple iOS, iPadOS, and macOS IOSurfaceAccelerator contain an out-of-bounds write vulnerability that allows an app to execute code with kernel privileges.
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1, iOS 15.7.5 and iPadOS 15.7.5, macOS Big Sur 11.7.6. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.
CVSS 3.1 vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:HPublishedApr 10, 2023
Last modifiedJun 17, 2026
Added to KEVApr 10, 2023
Remediation dueMay 1, 2023
References
- support.apple.com/en-us/HT213720Release NotesVendor Advisory
- support.apple.com/en-us/HT213721Release NotesVendor Advisory
- support.apple.com/en-us/HT213723Release NotesVendor Advisory
- support.apple.com/en-us/HT213724Release NotesVendor Advisory
- support.apple.com/en-us/HT213725Release NotesVendor Advisory
- cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-28206US Government Resource
0 recent articles mention this CVE
75
Risk assessment · High
Actively exploited. Patch immediately.
- Exploitation
- Confirmed in the wild (CISA KEV)
- Federal remediation deadline
- Overdue by 1274 days
- CVSS
- 8.6 HIGH
- EPSS (30-day exploit probability)
- 23.2% · top 2% of all CVEs
- Weakness
- CWE-787
Recommended actions
- 1.Apply updates per vendor instructions.
- 2.Treat as emergency change: patch or isolate internet-facing instances first.
- 3.Hunt for compromise: review logs for the disclosure window, not just from the patch date.
Assessment is derived automatically from the live signals above; verify against your own asset inventory.