Apr 10, 2023

Started

• ClosedHigh✓Patched

  Apple iOS, iPadOS, and macOS: IOSurfaceAccelerator Out-of-Bounds Write (CVE-2023-28206)

  Apple iOS, iPadOS, and macOS IOSurfaceAccelerator contain an out-of-bounds write vulnerability that allows an app to execute code with kernel privileges. Added to CISA KEV on 2023-04-10.

  Apple iOS, iPadOS, and macOS·Closed Apr 10, 2023·updated Apr 10, 2023

• ClosedHigh✓Patched

  Apple Multiple Products: WebKit Use-After-Free (CVE-2023-28205)

  Apple iOS, iPadOS, macOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. Added to CISA KEV on 2023-04-10.

  Apple Multiple Products·Closed Apr 10, 2023·updated Apr 10, 2023