high Known exploitedREV. 01
CVE-2023-23529Apple WebKit — Type Confusion Code Execution
A type confusion flaw in WebKit means processing crafted web content may lead to arbitrary code execution on iOS, iPadOS, macOS and in Safari. Other products that rely on WebKit may also be affected.
Read the risk
THE VITAL STATS- CVSS score
- 8.8/ 10 CVSS v3.1
- EPSS probability
- 9.4% Likelihood of exploitation
- Attack complexity
- Low Conditions needed to exploit
- Known exploited
- Yes — CISA KEV
- CVE published
- 2023-02-27
- Added to KEV
- 2023-02-14
- CISA due date
- 2023-03-07
- Exploit published
- Not recorded
- Confidence
- high
- Kill chain
- execution
- MITRE ATT&CK
- T1203
- Severity
- high
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attacker needsA user must load maliciously crafted web content.
Fixed iniOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, Safari 16.3
Behind the card
5 REFERENCES- 01CVE recordNVD recordnvd.nist.gov
- 02CISACISA Known Exploited Vulnerabilities catalogcisa.gov
- 03Vendor advisorysupport.apple.comsupport.apple.com
- 04Vendor advisorysupport.apple.comsupport.apple.com
- 05Vendor advisorysupport.apple.comsupport.apple.com
Field-level provenanceTRACE THE SOURCES +
Which source supports each field, when it was retrieved, and who extracted it.
| Fields | Source | Retrieved | Extractor | Confidence |
|---|---|---|---|---|
| cvss, exploitation.attack_complexity, exploitation.exploit_available, published_at, references | nvd.nist.gov | 2026-11-05 | scrty-crds-pipeline/0.1 | high |
| exploitation.known_exploited, exploitation.kev_added, exploitation.kev_due | cisa.gov | 2026-11-05 | scrty-crds-pipeline/0.1 | high |
| epss | api.first.org | 2026-11-05 | scrty-crds-pipeline/0.1 | high |
| title, subtitle, summary, severity, remediation, mitre_attack, kill_chain, recommended_action, confidence, tags, exploitation.prerequisites | nvd.nist.gov | 2026-11-05 | claude-code | high |
Printing history
THE RECORD- r1Initial base card
History unavailable — this build has no Git history for the card file.