CVE-2023-23529Apple Multiple Products WebKit Type Confusion Vulnerability

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, Safari 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

8.8 HIGHEPSS 9.42%⚡ Known Exploited (CISA KEV)NVD: Published

Last updated: 2025-10-21 23:15 UTC

Overview Affected Products References

NVD CVE.org

Overview

Severity

Score	Severity	Version	Vector String
8.8	HIGH	3.1CISA-ADP	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CVE ID: CVE-2023-23529
Status: Published
Assigner (CNA): apple
Published: Feb 27, 2023
Last modified: 2025-10-21 23:15 UTC
Weaknesses: CWE-843

Sources

NVD (unavailable at last refresh)
CVE.org
CISA KEV
FIRST EPSS

Refreshed hourly from the sources above. Last fetched 2026-11-08 14:27 UTC.