CVE-2023-43000

KEVApple Multiple products Use-After-Free Vulnerability

Description

Apple macOS, iOS, iPadOS, and Safari 16.6 contain a use-after-free vulnerability due to the processing of maliciously crafted web content that may lead to memory corruption.

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.

CVSS 3.1 vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

PublishedNov 5, 2025

Last modifiedSep 21, 2026

Added to KEVMar 5, 2026

Remediation dueMar 26, 2026

References

support.apple.com/en-us/120324Release NotesVendor Advisory
support.apple.com/en-us/120331Release NotesVendor Advisory
support.apple.com/en-us/120338Release NotesVendor Advisory
support.apple.com/en-us/126632Release NotesVendor Advisory
cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kitExploitThird Party Advisory
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-43000US Government Resource

0 recent articles mention this CVE

Risk assessment · High

Actively exploited. Patch immediately.

Exploitation: Confirmed in the wild (CISA KEV)
Federal remediation deadline: Overdue by 214 days
CVSS: 8.8 HIGH
EPSS (30-day exploit probability): 4.0% · top 9% of all CVEs
Weakness: CWE-416
Attack vector: Network, remotely reachable

Recommended actions

1.Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
2.Treat as emergency change: patch or isolate internet-facing instances first.
3.Review exposure: confirm which instances are reachable from the internet and restrict access until patched.
4.Hunt for compromise: review logs for the disclosure window, not just from the patch date.

Assessment is derived automatically from the live signals above; verify against your own asset inventory.