{"schemaVersion":3,"id":"CVE-2023-43000","aliases":["UBUNTU-CVE-2023-43000","DEBIAN-CVE-2023-43000"],"status":"published","duplicateOf":null,"title":"Apple Multiple products Use-After-Free Vulnerability","description":"A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.","dates":{"published":"2025-11-05T18:33:23.777Z","modified":"2026-09-21T19:03:00.605Z","reserved":null,"kevAdded":["2026-03-05T00:00:00.000Z"],"kevDue":["2026-03-26T00:00:00.000Z"]},"cvss":{"headline":{"score":8.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.04042,"percentile":0.9051,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.14399999999999968,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.03898},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.04042,"percentile":0.9051}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03898,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04042,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.04042,"percentile":0.9051}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2026-03-05T00:00:00.000Z","dueDate":"2026-03-26T00:00:00.000Z","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","name":"Apple Multiple products Use-After-Free Vulnerability","description":"Apple macOS, iOS, iPadOS, and Safari 16.6 contain a use-after-free vulnerability due to the processing of maliciously crafted web content that may lead to memory corruption.","notes":[{"type":"url","href":"https://support.apple.com/en-us/120324","label":"support.apple.com/en-us/120324"},{"type":"url","href":"https://support.apple.com/en-us/120331","label":"support.apple.com/en-us/120331"},{"type":"url","href":"https://support.apple.com/en-us/120338","label":"support.apple.com/en-us/120338"},{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2023-43000","label":"nvd.nist.gov/vuln/detail/CVE-2023-43000"}],"vendor":"Apple","product":"Multiple Products","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2026-03-05T00:00:00.000Z","dueDate":"2026-03-26T00:00:00.000Z","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","name":"Apple Multiple products Use-After-Free Vulnerability","description":"Apple macOS, iOS, iPadOS, and Safari 16.6 contain a use-after-free vulnerability due to the processing of maliciously crafted web content that may lead to memory corruption.","notes":[{"type":"url","href":"https://support.apple.com/en-us/120324","label":"support.apple.com/en-us/120324"},{"type":"url","href":"https://support.apple.com/en-us/120331","label":"support.apple.com/en-us/120331"},{"type":"url","href":"https://support.apple.com/en-us/120338","label":"support.apple.com/en-us/120338"},{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2023-43000","label":"nvd.nist.gov/vuln/detail/CVE-2023-43000"}],"vendor":"Apple","product":"Multiple Products","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_5E768FE189B85D55","name":"Exploit Reference (cloud.google.com)","source":"reference","url":"https://cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kit","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-416","name":"Use After Free","description":"The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","type":"weakness","status":"Stable","abstraction":"Variant","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/416.html"}],"affected":[{"vendor":"apple","product":"ios and ipados","name":"iOS and iPadOS","label":"ios and ipados","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, < 16.6","noFixRecorded":false,"fixedIn":null},{"text":"≥ unspecified, < 15.8.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, < 16.6 | ≥ unspecified, < 15.8.7","eol":null,"hubHref":"/vendor/apple/ios_and_ipados"},{"vendor":"apple","product":"ipados","name":"ipados","label":"ipados","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 15.8.7","noFixRecorded":false,"fixedIn":null},{"text":"≥ 16.0, < 16.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.8.7 | ≥ 16.0, < 16.6","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"ipados","label":"Apple iPadOS","category":"os"}},"hubHref":"/vendor/apple/ipados"},{"vendor":"apple","product":"iphone_os","name":"iphone os","label":"iphone_os","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 15.8.7","noFixRecorded":false,"fixedIn":null},{"text":"≥ 16.0, < 16.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.8.7 | ≥ 16.0, < 16.6","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"ios","label":"Apple iOS","category":"os"}},"hubHref":"/vendor/apple/iphone_os"},{"vendor":"apple","product":"macos","name":"macos","label":"macos","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, < 13.5","noFixRecorded":false,"fixedIn":null},{"text":"< 13.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, < 13.5 | < 13.5","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"macos","label":"Apple macOS","category":"os"}},"hubHref":"/vendor/apple/macos"},{"vendor":"apple","product":"safari","name":"Safari","label":"safari","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, < 16.6","noFixRecorded":false,"fixedIn":null},{"text":"< 16.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, < 16.6 | < 16.6","eol":null,"hubHref":"/vendor/apple/safari"},{"vendor":"debian","product":"webkit2gtk","name":"webkit2gtk","label":"webkit2gtk","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/webkit2gtk","purlType":"deb","versions":[{"text":"< 2.42.1-1~deb12u1","noFixRecorded":false,"fixedIn":null},{"text":"< 2.42.0-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.42.1-1~deb12u1 | < 2.42.0-1","eol":null,"hubHref":null},{"vendor":"debian","product":"wpewebkit","name":"wpewebkit","label":"wpewebkit","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/wpewebkit","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.42.0-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.42.0-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"qtwebkit-opensource-src","name":"qtwebkit-opensource-src","label":"qtwebkit-opensource-src","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/qtwebkit-opensource-src","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"qtwebkit-source","name":"qtwebkit-source","label":"qtwebkit-source","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/qtwebkit-source","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"webkit2gtk","name":"webkit2gtk","label":"webkit2gtk","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/webkit2gtk","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.42.1-0ubuntu0.22.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.42.1-0ubuntu0.22.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"webkitgtk","name":"webkitgtk","label":"webkitgtk","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/webkitgtk","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"wpewebkit","name":"wpewebkit","label":"wpewebkit","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/wpewebkit","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null}],"affectedCount":12,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://support.apple.com/en-us/120331","label":"support.apple.com/en-us/120331","hostname":"support.apple.com","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/120338","label":"support.apple.com/en-us/120338","hostname":"support.apple.com","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/120324","label":"support.apple.com/en-us/120324","hostname":"support.apple.com","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/126632","label":"support.apple.com/en-us/126632","hostname":"support.apple.com","tags":["Release Notes","Vendor Advisory"]},{"url":"https://cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kit","label":"cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kit","hostname":"cloud.google.com","tags":["Third Party Advisory","Exploit"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-43000","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-43000","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]},{"url":"https://ubuntu.com/security/CVE-2023-43000","label":"ubuntu.com/security/CVE-2023-43000","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-43000","label":"www.cve.org/CVERecord?id=CVE-2023-43000","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://webkitgtk.org/security/WSA-2025-0008.html","label":"webkitgtk.org/security/WSA-2025-0008.html","hostname":"webkitgtk.org","tags":["REPORT"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog","hostname":"www.cisa.gov","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-43000","label":"security-tracker.debian.org/tracker/CVE-2023-43000","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DSA-5527-1","OPENSUSE-SU-2026:20065-1","RHSA-2024:2126","RHSA-2024:2982","RHSA-2024:8492","RHSA-2024:8496","RHSA-2024:9646","RHSA-2024:9653","RHSA-2024:9679","RHSA-2024:9680","RHSA-2025:10364","SUSE-SU-2025:4416-1","SUSE-SU-2025:4423-1","SUSE-SU-2026:0021-1","SUSE-SU-2026:20102-1"],"duplicates":[],"related":["OPENSUSE-SU-2026:20065-1","SUSE-SU-2025:4416-1","SUSE-SU-2025:4423-1","SUSE-SU-2026:0021-1","SUSE-SU-2026:20102-1"]},"timeline":[{"kind":"published","date":"2025-11-05T18:33:23.777Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2026-03-05T00:00:00.000Z","label":"Added to CISA KEV","detail":"Apple Multiple products Use-After-Free Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2026-03-26T00:00:00.000Z","label":"CISA remediation due","detail":"Apply mitigations per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2026-09-21T19:03:00.605Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T04:25:19.163Z","stale":false,"partial":false}}