{"history":[{"alert":0,"cve":"CVE-2023-32409","id":22556,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.1653, \"percentile\": 0.97046}"},{"alert":0,"cve":"CVE-2023-32409","id":20175,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.1653, \"percentile\": 0.97028}"},{"alert":0,"cve":"CVE-2023-32409","id":18141,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.1653, \"percentile\": 0.97024}"},{"alert":0,"cve":"CVE-2023-32409","id":16205,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.1653, \"percentile\": 0.97023}"},{"alert":0,"cve":"CVE-2023-32409","id":14183,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.1653, \"percentile\": 0.97021}"},{"alert":0,"cve":"CVE-2023-32409","id":11965,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.1653, \"percentile\": 0.97016}"},{"alert":0,"cve":"CVE-2023-32409","id":9951,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.1653, \"percentile\": 0.97015}"},{"alert":0,"cve":"CVE-2023-32409","id":7499,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.1653, \"percentile\": 0.97013}"},{"alert":1,"cve":"CVE-2023-32409","id":6276,"kind":"cna","observed_at":1793809200,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-02T15:18:36.914Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"tags\": [\"x_transferred\"], \"url\": \"https://support.apple.com/en-us/HT213758\"}, {\"tags\": [\"x_transferred\"], \"url\": \"https://support.apple.com/en-us/HT213762\"}, {\"tags\": [\"x_transferred\"], \"url\": \"https://support.apple.com/en-us/HT213764\"}, {\"tags\": [\"x_transferred\"], \"url\": \"https://support.apple.com/en-us/HT213842\"}, {\"tags\": [\"x_transferred\"], \"url\": \"https://support.apple.com/en-us/HT213757\"}, {\"tags\": [\"x_transferred\"], \"url\": \"https://support.apple.com/en-us/HT213761\"}], \"title\": \"CVE Program Container\"}, {\"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"NONE\", \"baseScore\": 8.6, \"baseSeverity\": \"HIGH\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"scope\": \"CHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N\", \"version\": \"3.1\"}}, {\"other\": {\"content\": {\"id\": \"CVE-2023-32409\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-01-27T22:14:51.718639Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2023-05-22\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-32409\"}, \"type\": \"kev\"}}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"CWE-noinfo Not enough information\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-01-12T19:59:41.495Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-32409\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"macOS\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"13.4\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\"}]}, {\"product\": \"Safari\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"16.5\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\"}]}, {\"product\": \"watchOS\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"9.5\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\"}]}, {\"product\": \"iOS and iPadOS\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"15.7\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\"}]}, {\"product\": \"iOS and iPadOS\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"16.5\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\"}]}, {\"product\": \"tvOS\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"16.5\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.8 and iPadOS 15.7.8, Safari 16.5, iOS 16.5 and iPadOS 16.5. A remote attacker may be able to break out of Web Content sandbox. Apple is aware of a report that this issue may have been actively exploited.\"}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"A remote attacker may be able to break out of Web Content sandbox. Apple is aware of a report that this issue may have been actively exploited.\", \"lang\": \"en\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2023-07-27T03:46:06.674Z\", \"orgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"shortName\": \"apple\"}, \"references\": [{\"url\": \"https://support.apple.com/en-us/HT213758\"}, {\"url\": \"https://support.apple.com/en-us/HT213762\"}, {\"url\": \"https://support.apple.com/en-us/HT213764\"}, {\"url\": \"https://support.apple.com/en-us/HT213842\"}, {\"url\": \"https://support.apple.com/en-us/HT213757\"}, {\"url\": \"https://support.apple.com/en-us/HT213761\"}]}}, \"cveMetadata\": {\"assignerOrgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"assignerShortName\": \"apple\", \"cveId\": \"CVE-2023-32409\", \"datePublished\": \"2023-06-23T00:00:00.000Z\", \"dateReserved\": \"2023-05-08T00:00:00.000Z\", \"dateUpdated\": \"2026-01-12T19:59:41.495Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"},{"alert":0,"cve":"CVE-2023-32409","id":5276,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.1653, \"percentile\": 0.97008}"},{"alert":0,"cve":"CVE-2023-32409","id":3058,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.1653, \"percentile\": 0.97004}"},{"alert":1,"cve":"CVE-2023-32409","id":830,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2023-32409\", \"cwes\": [], \"dateAdded\": \"2023-05-22\", \"dueDate\": \"2023-06-12\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://support.apple.com/HT213757, https://support.apple.com/HT213758, https://support.apple.com/HT213761, https://support.apple.com/HT213762, https://support.apple.com/HT213764, https://support.apple.com/HT213765; https://nvd.nist.gov/vuln/detail/CVE-2023-32409\", \"product\": \"Multiple Products\", \"requiredAction\": \"Apply updates per vendor instructions.\", \"shortDescription\": \"Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an unspecified vulnerability that can allow a remote attacker to break out of the Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.\", \"vendorProject\": \"Apple\", \"vulnerabilityName\": \"Apple Multiple Products WebKit Sandbox Escape Vulnerability\"}"}],"record":{"affected":[{"product":"macOS","vendor":"Apple","versions":[{"lessThan":"13.4","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"Safari","vendor":"Apple","versions":[{"lessThan":"16.5","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"watchOS","vendor":"Apple","versions":[{"lessThan":"9.5","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"iOS and iPadOS","vendor":"Apple","versions":[{"lessThan":"15.7","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"iOS and iPadOS","vendor":"Apple","versions":[{"lessThan":"16.5","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"tvOS","vendor":"Apple","versions":[{"lessThan":"16.5","status":"affected","version":"unspecified","versionType":"custom"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-02T15:18:36.914Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_transferred"],"url":"https://support.apple.com/en-us/HT213758"},{"tags":["x_transferred"],"url":"https://support.apple.com/en-us/HT213762"},{"tags":["x_transferred"],"url":"https://support.apple.com/en-us/HT213764"},{"tags":["x_transferred"],"url":"https://support.apple.com/en-us/HT213842"},{"tags":["x_transferred"],"url":"https://support.apple.com/en-us/HT213757"},{"tags":["x_transferred"],"url":"https://support.apple.com/en-us/HT213761"}],"title":"CVE Program Container"},{"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","version":"3.1"}},{"other":{"content":{"id":"CVE-2023-32409","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-01-27T22:14:51.718639Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2023-05-22","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-32409"},"type":"kev"}}],"problemTypes":[{"descriptions":[{"description":"CWE-noinfo Not enough information","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-01-12T19:59:41.495Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-32409"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"macOS","vendor":"Apple","versions":[{"lessThan":"13.4","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"Safari","vendor":"Apple","versions":[{"lessThan":"16.5","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"watchOS","vendor":"Apple","versions":[{"lessThan":"9.5","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"iOS and iPadOS","vendor":"Apple","versions":[{"lessThan":"15.7","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"iOS and iPadOS","vendor":"Apple","versions":[{"lessThan":"16.5","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"tvOS","vendor":"Apple","versions":[{"lessThan":"16.5","status":"affected","version":"unspecified","versionType":"custom"}]}],"descriptions":[{"lang":"en","value":"The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.8 and iPadOS 15.7.8, Safari 16.5, iOS 16.5 and iPadOS 16.5. A remote attacker may be able to break out of Web Content sandbox. Apple is aware of a report that this issue may have been actively exploited."}],"problemTypes":[{"descriptions":[{"description":"A remote attacker may be able to break out of Web Content sandbox. Apple is aware of a report that this issue may have been actively exploited.","lang":"en"}]}],"providerMetadata":{"dateUpdated":"2023-07-27T03:46:06.674Z","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple"},"references":[{"url":"https://support.apple.com/en-us/HT213758"},{"url":"https://support.apple.com/en-us/HT213762"},{"url":"https://support.apple.com/en-us/HT213764"},{"url":"https://support.apple.com/en-us/HT213842"},{"url":"https://support.apple.com/en-us/HT213757"},{"url":"https://support.apple.com/en-us/HT213761"}]}},"cveMetadata":{"assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","assignerShortName":"apple","cveId":"CVE-2023-32409","datePublished":"2023-06-23T00:00:00.000Z","dateReserved":"2023-05-08T00:00:00.000Z","dateUpdated":"2026-01-12T19:59:41.495Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794262800,"cve":"CVE-2023-32409","description":"The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.8 and iPadOS 15.7.8, Safari 16.5, iOS 16.5 and iPadOS 16.5. A remote attacker may be able to break out of Web Content sandbox. Apple is aware of a report that this issue may have been actively exploited.","epss":{"date":"2026-11-12","epss":0.1653,"percentile":0.97046},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2023-32409","cwes":[],"dateAdded":"2023-05-22","dueDate":"2023-06-12","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://support.apple.com/HT213757, https://support.apple.com/HT213758, https://support.apple.com/HT213761, https://support.apple.com/HT213762, https://support.apple.com/HT213764, https://support.apple.com/HT213765; https://nvd.nist.gov/vuln/detail/CVE-2023-32409","product":"Multiple Products","requiredAction":"Apply updates per vendor instructions.","shortDescription":"Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain an unspecified vulnerability that can allow a remote attacker to break out of the Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.","vendorProject":"Apple","vulnerabilityName":"Apple Multiple Products WebKit Sandbox Escape Vulnerability"},"kev_checked":1794522003,"products":"Apple macOS, Apple Safari, Apple watchOS, Apple iOS and iPadOS, Apple tvOS","references":["https://support.apple.com/en-us/HT213758","https://support.apple.com/en-us/HT213762","https://support.apple.com/en-us/HT213764","https://support.apple.com/en-us/HT213842","https://support.apple.com/en-us/HT213757","https://support.apple.com/en-us/HT213761","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-32409"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.6,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","provider":"CISA-ADP","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Apple Multiple Products WebKit Sandbox Escape Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}