← CVE Radar
CVE-2023-28206Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1, iOS 15.7.5 and iPadOS 15.7.5, macOS Big Sur 11.7.6. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.
8.6 HIGHEPSS 23.21%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.6 | HIGH | 3.1NVD | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H |
CISA required action
⚡ Known exploited · remediation due May 1, 2023
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2023-28206
- Status
- Analyzed
- Assigner (CNA)
- apple
- Published
- Apr 10, 2023
- Last modified
- 2026-06-17 05:47 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
AppleiOS and iPadOS1 version range
- before 15.7
ApplemacOS1 version range
- before 11.7
ApplemacOS1 version range
- before 12.6
ApplemacOS1 version range
- before 13.3
AppleiOS and iPadOS1 version range
- before 16.4
References
- support.apple.com https://support.apple.com/en-us/HT213720
- support.apple.com https://support.apple.com/en-us/HT213721
- support.apple.com https://support.apple.com/en-us/HT213723
- support.apple.com https://support.apple.com/en-us/HT213724
- support.apple.com https://support.apple.com/en-us/HT213725
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-28206