{"id":"CVE-2023-28204","published":"2023-06-23T18:15:11Z","modified":"2026-06-17T05:47:05Z","title":"Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","vendor":"Apple","product":"Multiple Products","tier":"core","eol":null,"description":{"text":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been actively exploited.","provenance":"source","from":"NVD"},"summary":{"text":"A WebKit out-of-bounds read flaw in Apple's multiple products, the web content rendering engine shared across Apple's operating systems and Safari, lets processed web content read memory beyond intended bounds. An attacker can exploit it remotely without authentication by getting a user to load malicious web content, which requires user interaction, and the result is disclosure of sensitive information.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:13:58Z"},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","provenance":"source","from":"NVD"},"epss":{"score":0.14292,"percentile":0.96593,"date":"2026-10-29","provenance":"source"},"kev":{"dateAdded":"2023-05-22","dueDate":"2023-06-12","ransomware":false,"requiredAction":"Apply updates per vendor instructions.","notes":"https://support.apple.com/HT213757, https://support.apple.com/HT213758, https://support.apple.com/HT213761, https://support.apple.com/HT213762, https://support.apple.com/HT213764, https://support.apple.com/HT213765;  https://nvd.nist.gov/vuln/detail/CVE-2023-28204","provenance":"source"},"vulncheckKev":{"dateAdded":"2023-05-01","exploitedFirstSeen":"2023-05-01","ransomware":false,"evidence":[{"url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit","date":"2023-05-01"},{"url":"https://support.apple.com/kb/HT213757","date":"2023-05-18"},{"url":"https://support.apple.com/kb/HT213758","date":"2023-05-18"},{"url":"https://support.apple.com/kb/HT213761","date":"2023-05-18"},{"url":"https://support.apple.com/kb/HT213762","date":"2023-05-18"},{"url":"https://support.apple.com/kb/HT213764","date":"2023-05-18"},{"url":"https://support.apple.com/kb/HT213765","date":"2023-05-18"},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","date":"2023-05-22"},{"url":"https://ti.qianxin.com/uploads/2024/02/02/dcc93e586f9028c68e7ab34c3326ff31.pdf","date":"2024-02-02"}],"evidenceTotal":9,"provenance":"source"},"exploited":true,"otx":{"pulseCount":50,"pulses":[{"name":"Actively_Exploited_Kev | Oct 29, 2026","url":"https://otx.alienvault.com/pulse/6ae20c1db17e7057ae7d9ad1","created":"2026-10-28"},{"name":"Actively_Exploited_Kev | Oct 28, 2026","url":"https://otx.alienvault.com/pulse/6ae0ba7e0e2a97ff7b218819","created":"2026-10-27"},{"name":"Actively_Exploited_Kev | Oct 27, 2026","url":"https://otx.alienvault.com/pulse/6adf68b85c3e852f3c111d18","created":"2026-10-26"},{"name":"Actively_Exploited_Kev | Oct 24, 2026","url":"https://otx.alienvault.com/pulse/6adb740e397c3ad4799aa4cd","created":"2026-10-23"},{"name":"Actively_Exploited_Kev | Oct 23, 2026","url":"https://otx.alienvault.com/pulse/6ada236fcfba2dfa730ea482","created":"2026-10-22"},{"name":"Actively_Exploited_Kev | Oct 22, 2026","url":"https://otx.alienvault.com/pulse/6ad8d33a077cbb5cab524d80","created":"2026-10-21"},{"name":"Actively_Exploited_Kev | Oct 21, 2026","url":"https://otx.alienvault.com/pulse/6ad78130c4d1ac2be83a8b6d","created":"2026-10-20"},{"name":"Actively_Exploited_Kev | Oct 20, 2026","url":"https://otx.alienvault.com/pulse/6ad62f63c24a405a3423cc13","created":"2026-10-19"},{"name":"Actively_Exploited_Kev | Oct 19, 2026","url":"https://otx.alienvault.com/pulse/6ad4dda174e5797d0bd238b7","created":"2026-10-18"},{"name":"Actively_Exploited_Kev | Oct 18, 2026","url":"https://otx.alienvault.com/pulse/6ad38c22e1848f8189d1c121","created":"2026-10-17"}],"provenance":"machine"},"cwes":[{"id":"CWE-125","name":"Out-of-bounds Read"}],"references":[{"url":"https://security.gentoo.org/glsa/202401-04","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/en-us/HT213757","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213758","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213761","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213762","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213764","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213765","tags":["Release Notes","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/202401-04","tags":["Third Party Advisory"]},{"url":"https://support.apple.com/en-us/HT213757","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213758","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213761","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213762","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213764","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213765","tags":["Release Notes","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-28204","tags":["US Government Resource"]}],"techniques":[{"id":"T1189","name":"Drive-by Compromise","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Malicious web content triggers the out-of-bounds read","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"Processing web content may disclose sensitive information","start":204,"end":261}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1005","name":"Data from Local System","tactics":["collection"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Memory overread discloses sensitive data locally","mappingType":"primary_impact","evidence":[{"from":"description","quote":"Processing web content may disclose sensitive information","start":204,"end":261}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2023-31912","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-31912","exploited":true,"exploitedSince":"2023-05-22","provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[{"stage":"exploitation","techniques":["T1189"],"provenance":"ai"},{"stage":"primary","techniques":["T1005"],"provenance":"ai"}],"timeline":[{"date":"2023-05-01","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit","provenance":"source"},{"date":"2023-05-22","kind":"kev","label":"Added to CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","provenance":"source"},{"date":"2023-05-22","kind":"euvd-exploited","label":"ENISA EUVD: exploited","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-31912","provenance":"source"},{"date":"2023-06-23","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28204","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":61.9,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in CISA KEV and VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1277 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.32,"detail":"percentile 0.9659"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":3.0,"detail":"50 pulses"},{"name":"CVSS severity","points":4.55,"detail":"base score 6.5"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"familyId":"fam-class-apple-ios-macos-cwe-125"}}