Back to Database
Status published
Unknown
CVE-2023-40423
The issue was addressed with improved memory handling. This issue...
Vulnerability Description
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. An app may be able to execute arbitrary code with kernel privileges.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-40423
Credits & Attribution
No credits recorded in the NVD database.
References
- https://support.apple.com/en-us/HT213981
- https://support.apple.com/en-us/HT213984
- https://support.apple.com/en-us/HT213985
- https://support.apple.com/en-us/HT213982
- https://support.apple.com/en-us/HT213983
- https://support.apple.com/kb/HT213982
- https://support.apple.com/kb/HT213984
- https://support.apple.com/kb/HT213985
- https://support.apple.com/kb/HT213981
- https://support.apple.com/kb/HT213983
- http://seclists.org/fulldisclosure/2023/Oct/23
- http://seclists.org/fulldisclosure/2023/Oct/19
- http://seclists.org/fulldisclosure/2023/Oct/21
- http://seclists.org/fulldisclosure/2023/Oct/24
- http://seclists.org/fulldisclosure/2023/Oct/26
More from Apple
View All →CVE-2025-46316
An out-of-bounds read was addressed with improved input validation. This...
Unknown
0
CVE-2025-46315
A permissions issue was addressed with additional restrictions. This issue...
Unknown
0
CVE-2025-46313
A logging issue was addressed with improved data redaction. This...
Unknown
0
CVE-2025-46311
An inconsistent user interface issue was addressed with improved state...
Unknown
0
CVE-2025-46310
This issue was addressed through improved state management. This issue...
Unknown
0
Affected Vendor
Apple
View all reports →Affected Software
iOS and iPadOS, macOS
Vulnerable Versions:
unspecified
Timeline
Official Publish:
October 25th, 2023
Last Modified:
February 13th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.