{
  "crds_version": "0.1",
  "kind": "base",
  "id": "crds:cve-2023-23529",
  "revision": 1,
  "title": "Apple WebKit — Type Confusion Code Execution",
  "summary": "A type confusion flaw in WebKit means processing crafted web content may lead to arbitrary code execution on iOS, iPadOS, macOS and in Safari. Other products that rely on WebKit may also be affected.",
  "source_type": "cve",
  "severity": "high",
  "cvss": {
    "score": 8.8,
    "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
    "version": "3.1"
  },
  "epss": 0.09426,
  "exploitation": {
    "known_exploited": true,
    "exploit_available": false,
    "attack_complexity": "low",
    "kev_added": "2023-02-14",
    "kev_due": "2023-03-07",
    "prerequisites": "A user must load maliciously crafted web content."
  },
  "remediation": {
    "patch_available": true,
    "fixed_in": [
      "iOS 15.7.4 and iPadOS 15.7.4",
      "iOS 16.3.1 and iPadOS 16.3.1",
      "macOS Ventura 13.2.1",
      "Safari 16.3"
    ]
  },
  "mitre_attack": [
    "T1203"
  ],
  "kill_chain": "execution",
  "recommended_action": "Update to iOS and iPadOS 15.7.4 or 16.3.1, macOS Ventura 13.2.1 or Safari 16.3.",
  "confidence": "high",
  "provenance": [
    {
      "fields": [
        "cvss",
        "exploitation.attack_complexity",
        "exploitation.exploit_available",
        "published_at",
        "references"
      ],
      "source": "https://nvd.nist.gov/vuln/detail/CVE-2023-23529",
      "retrieved_at": "2026-11-05T08:18:20.755Z",
      "confidence": "high",
      "extractor": "scrty-crds-pipeline/0.1"
    },
    {
      "fields": [
        "exploitation.known_exploited",
        "exploitation.kev_added",
        "exploitation.kev_due"
      ],
      "source": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "retrieved_at": "2026-11-05T08:18:20.755Z",
      "confidence": "high",
      "extractor": "scrty-crds-pipeline/0.1"
    },
    {
      "fields": [
        "epss"
      ],
      "source": "https://api.first.org/data/v1/epss?cve=CVE-2023-23529",
      "retrieved_at": "2026-11-05T08:18:20.755Z",
      "confidence": "high",
      "extractor": "scrty-crds-pipeline/0.1"
    },
    {
      "fields": [
        "title",
        "subtitle",
        "summary",
        "severity",
        "remediation",
        "mitre_attack",
        "kill_chain",
        "recommended_action",
        "confidence",
        "tags",
        "exploitation.prerequisites"
      ],
      "source": "https://nvd.nist.gov/vuln/detail/CVE-2023-23529",
      "retrieved_at": "2026-11-05T08:18:20.755Z",
      "confidence": "high",
      "extractor": "claude-code"
    }
  ],
  "references": [
    {
      "type": "cve",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-23529",
      "label": "NVD record"
    },
    {
      "type": "cisa",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "label": "CISA Known Exploited Vulnerabilities catalog"
    },
    {
      "type": "vendor_advisory",
      "url": "https://support.apple.com/en-us/HT213633"
    },
    {
      "type": "vendor_advisory",
      "url": "https://support.apple.com/en-us/HT213635"
    },
    {
      "type": "vendor_advisory",
      "url": "https://support.apple.com/en-us/HT213638"
    }
  ],
  "published_at": "2023-02-27T20:15:14.710Z",
  "issued_at": "2026-11-05T08:18:20.755Z",
  "tags": [
    "apple",
    "webkit",
    "type-confusion"
  ]
}