{"id":"CVE-2023-32434","published":"2023-06-23T18:15:13Z","modified":"2026-06-17T05:58:49Z","title":"Apple Multiple Products Integer Overflow Vulnerability","vendor":"Apple","product":"Multiple Products","tier":"core","eol":null,"description":{"text":"An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, watchOS 8.8.1, iOS 16.5.1 and iPadOS 16.5.1, macOS Ventura 13.4.1. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.","provenance":"source","from":"NVD"},"summary":{"text":"Apple's multiple products (including iOS, iPadOS, macOS, and watchOS) contain an integer overflow flaw in the kernel, which was addressed with improved input validation. An attacker who has a local app on the device can execute arbitrary code with kernel privileges, provided a user interacts with the app (for example, by opening or running it).","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:13:10Z"},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","provenance":"source","from":"NVD"},"epss":{"score":0.51517,"percentile":0.9894,"date":"2026-10-29","provenance":"source"},"kev":{"dateAdded":"2023-06-23","dueDate":"2023-07-14","ransomware":false,"requiredAction":"Apply updates per vendor instructions.","notes":"https://support.apple.com/en-us/HT213808, https://support.apple.com/en-us/HT213812, https://support.apple.com/en-us/HT213809, https://support.apple.com/en-us/HT213810, https://support.apple.com/en-us/HT213813, https://support.apple.com/en-us/HT213811, https://support.apple.com/en-us/HT213814;  https://nvd.nist.gov/vuln/detail/CVE-2023-32434","provenance":"source"},"vulncheckKev":{"dateAdded":"2023-06-21","exploitedFirstSeen":"2023-06-21","ransomware":false,"evidence":[{"url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit","date":"2023-06-21"},{"url":"https://support.apple.com/kb/HT213808","date":"2023-06-21"},{"url":"https://support.apple.com/kb/HT213809","date":"2023-06-21"},{"url":"https://support.apple.com/kb/HT213810","date":"2023-06-21"},{"url":"https://support.apple.com/kb/HT213811","date":"2023-06-21"},{"url":"https://support.apple.com/kb/HT213812","date":"2023-06-21"},{"url":"https://support.apple.com/kb/HT213813","date":"2023-06-21"},{"url":"https://support.apple.com/kb/HT213814","date":"2023-06-21"},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","date":"2023-06-23"},{"url":"https://support.apple.com/kb/HT213990","date":"2023-10-25"}],"evidenceTotal":20,"provenance":"source"},"exploited":true,"otx":{"pulseCount":50,"pulses":[{"name":"Actively_Exploited_Kev | Oct 29, 2026","url":"https://otx.alienvault.com/pulse/6ae20c1db17e7057ae7d9ad1","created":"2026-10-28"},{"name":"Actively_Exploited_Kev | Oct 28, 2026","url":"https://otx.alienvault.com/pulse/6ae0ba7e0e2a97ff7b218819","created":"2026-10-27"},{"name":"Actively_Exploited_Kev | Oct 27, 2026","url":"https://otx.alienvault.com/pulse/6adf68b85c3e852f3c111d18","created":"2026-10-26"},{"name":"Actively_Exploited_Kev | Oct 24, 2026","url":"https://otx.alienvault.com/pulse/6adb740e397c3ad4799aa4cd","created":"2026-10-23"},{"name":"Actively_Exploited_Kev | Oct 23, 2026","url":"https://otx.alienvault.com/pulse/6ada236fcfba2dfa730ea482","created":"2026-10-22"},{"name":"Actively_Exploited_Kev | Oct 22, 2026","url":"https://otx.alienvault.com/pulse/6ad8d33a077cbb5cab524d80","created":"2026-10-21"},{"name":"Actively_Exploited_Kev | Oct 21, 2026","url":"https://otx.alienvault.com/pulse/6ad78130c4d1ac2be83a8b6d","created":"2026-10-20"},{"name":"Actively_Exploited_Kev | Oct 20, 2026","url":"https://otx.alienvault.com/pulse/6ad62f63c24a405a3423cc13","created":"2026-10-19"},{"name":"Actively_Exploited_Kev | Oct 19, 2026","url":"https://otx.alienvault.com/pulse/6ad4dda174e5797d0bd238b7","created":"2026-10-18"},{"name":"Actively_Exploited_Kev | Oct 18, 2026","url":"https://otx.alienvault.com/pulse/6ad38c22e1848f8189d1c121","created":"2026-10-17"}],"provenance":"machine"},"cwes":[{"id":"CWE-190","name":"Integer Overflow or Wraparound"}],"references":[{"url":"http://seclists.org/fulldisclosure/2023/Oct/20","tags":["Mailing List","Third Party Advisory"]},{"url":"https://support.apple.com/en-us/HT213808","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213809","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213810","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213811","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213812","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213813","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213814","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT213990","tags":["Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/20","tags":["Mailing List","Third Party Advisory"]},{"url":"https://support.apple.com/en-us/HT213808","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213809","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213810","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213811","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213812","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213813","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213814","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT213990","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-32434","tags":["US Government Resource"]}],"techniques":[{"id":"T1068","name":"Exploitation for Privilege Escalation","tactics":["privilege-escalation"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Local app exploits kernel for privilege escalation","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"An app may be able to execute arbitrary code with kernel privileges","start":246,"end":313}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2023-36678","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36678","exploited":true,"exploitedSince":"2023-06-23","provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":2,"skipped":0,"earliest":"2025-03-01","earliestUrl":"https://github.com/alfiecg24/Trigon","repos":[{"name":"alfiecg24/Trigon","url":"https://github.com/alfiecg24/Trigon","stars":157,"created":"2025-03-01"},{"name":"rkrakesh524/oob_entry","url":"https://github.com/rkrakesh524/oob_entry","stars":0,"created":"2025-08-13"}]},"first":{"date":"2025-03-01","source":"PoC-in-GitHub","url":"https://github.com/alfiecg24/Trigon"},"provenance":"source"},"exploitRefs":[],"flow":[{"stage":"exploitation","techniques":["T1068"],"provenance":"ai"}],"timeline":[{"date":"2023-06-21","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit","provenance":"source"},{"date":"2023-06-23","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32434","provenance":"source"},{"date":"2023-06-23","kind":"kev","label":"Added to CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","provenance":"source"},{"date":"2023-06-23","kind":"euvd-exploited","label":"ENISA EUVD: exploited","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36678","provenance":"source"},{"date":"2025-03-01","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/alfiecg24/Trigon","provenance":"source"}],"speed":{"daysToPublicExploit":617,"firstExploitFrom":"PoC-in-GitHub","daysToKev":0},"priority":{"score":68.2,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in CISA KEV and VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1227 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.79,"detail":"percentile 0.9894"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"2 PoC-in-GitHub repos"},{"name":"Mentioned in OTX pulses","points":3.0,"detail":"50 pulses"},{"name":"CVSS severity","points":5.46,"detail":"base score 7.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"familyId":"fam-class-apple-ios-macos-cwe-190"}}