{"history":[{"alert":0,"cve":"CVE-2023-43000","id":22494,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.04042, \"percentile\": 0.90763}"},{"alert":0,"cve":"CVE-2023-43000","id":20113,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.04042, \"percentile\": 0.90706}"},{"alert":0,"cve":"CVE-2023-43000","id":18079,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.04042, \"percentile\": 0.90695}"},{"alert":0,"cve":"CVE-2023-43000","id":16143,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.04042, \"percentile\": 0.90689}"},{"alert":0,"cve":"CVE-2023-43000","id":14121,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.04042, \"percentile\": 0.90682}"},{"alert":0,"cve":"CVE-2023-43000","id":11903,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.04042, \"percentile\": 0.90666}"},{"alert":0,"cve":"CVE-2023-43000","id":9889,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.04042, \"percentile\": 0.90657}"},{"alert":0,"cve":"CVE-2023-43000","id":7437,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.04042, \"percentile\": 0.9065}"},{"alert":1,"cve":"CVE-2023-43000","id":6214,"kind":"cna","observed_at":1793809200,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 8.8, \"baseSeverity\": \"HIGH\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"REQUIRED\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}}, {\"other\": {\"content\": {\"id\": \"CVE-2023-43000\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2026-03-06T05:01:14.932410Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2026-03-05\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-43000\"}, \"type\": \"kev\"}}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-416\", \"description\": \"CWE-416 Use After Free\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-09-21T19:03:00.605Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"third-party-advisory\"], \"url\": \"https://cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kit\"}, {\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-43000\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"macOS\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"13.5\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\"}]}, {\"product\": \"iOS and iPadOS\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"16.6\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\"}]}, {\"product\": \"Safari\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"16.6\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\"}]}, {\"product\": \"iOS and iPadOS\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"15.8.7\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"custom\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.\"}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"Processing maliciously crafted web content may lead to memory corruption\", \"lang\": \"en\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-03-12T00:52:04.293Z\", \"orgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"shortName\": \"apple\"}, \"references\": [{\"url\": \"https://support.apple.com/en-us/120331\"}, {\"url\": \"https://support.apple.com/en-us/120338\"}, {\"url\": \"https://support.apple.com/en-us/120324\"}, {\"url\": \"https://support.apple.com/en-us/126632\"}]}}, \"cveMetadata\": {\"assignerOrgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"assignerShortName\": \"apple\", \"cveId\": \"CVE-2023-43000\", \"datePublished\": \"2025-11-05T18:33:23.777Z\", \"dateReserved\": \"2023-09-14T19:05:11.491Z\", \"dateUpdated\": \"2026-09-21T19:03:00.605Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"},{"alert":0,"cve":"CVE-2023-43000","id":5214,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.04042, \"percentile\": 0.90633}"},{"alert":0,"cve":"CVE-2023-43000","id":2996,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.04042, \"percentile\": 0.90621}"},{"alert":1,"cve":"CVE-2023-43000","id":233,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2023-43000\", \"cwes\": [\"CWE-416\"], \"dateAdded\": \"2026-03-05\", \"dueDate\": \"2026-03-26\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://support.apple.com/en-us/120324 ; https://support.apple.com/en-us/120331 ; https://support.apple.com/en-us/120338 ; https://nvd.nist.gov/vuln/detail/CVE-2023-43000\", \"product\": \"Multiple Products\", \"requiredAction\": \"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.\", \"shortDescription\": \"Apple macOS, iOS, iPadOS, and Safari 16.6 contain a use-after-free vulnerability due to the processing of maliciously crafted web content that may lead to memory corruption.\", \"vendorProject\": \"Apple\", \"vulnerabilityName\": \"Apple Multiple products Use-After-Free Vulnerability\"}"}],"record":{"affected":[{"product":"macOS","vendor":"Apple","versions":[{"lessThan":"13.5","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"iOS and iPadOS","vendor":"Apple","versions":[{"lessThan":"16.6","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"Safari","vendor":"Apple","versions":[{"lessThan":"16.6","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"iOS and iPadOS","vendor":"Apple","versions":[{"lessThan":"15.8.7","status":"affected","version":"unspecified","versionType":"custom"}]}],"cna":{"containers":{"adp":[{"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}},{"other":{"content":{"id":"CVE-2023-43000","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2026-03-06T05:01:14.932410Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2026-03-05","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-43000"},"type":"kev"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-416","description":"CWE-416 Use After Free","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-09-21T19:03:00.605Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["third-party-advisory"],"url":"https://cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kit"},{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-43000"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"macOS","vendor":"Apple","versions":[{"lessThan":"13.5","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"iOS and iPadOS","vendor":"Apple","versions":[{"lessThan":"16.6","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"Safari","vendor":"Apple","versions":[{"lessThan":"16.6","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"iOS and iPadOS","vendor":"Apple","versions":[{"lessThan":"15.8.7","status":"affected","version":"unspecified","versionType":"custom"}]}],"descriptions":[{"lang":"en","value":"A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption."}],"problemTypes":[{"descriptions":[{"description":"Processing maliciously crafted web content may lead to memory corruption","lang":"en"}]}],"providerMetadata":{"dateUpdated":"2026-03-12T00:52:04.293Z","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple"},"references":[{"url":"https://support.apple.com/en-us/120331"},{"url":"https://support.apple.com/en-us/120338"},{"url":"https://support.apple.com/en-us/120324"},{"url":"https://support.apple.com/en-us/126632"}]}},"cveMetadata":{"assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","assignerShortName":"apple","cveId":"CVE-2023-43000","datePublished":"2025-11-05T18:33:23.777Z","dateReserved":"2023-09-14T19:05:11.491Z","dateUpdated":"2026-09-21T19:03:00.605Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794241201,"cve":"CVE-2023-43000","description":"A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.","epss":{"date":"2026-11-12","epss":0.04042,"percentile":0.90763},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2023-43000","cwes":["CWE-416"],"dateAdded":"2026-03-05","dueDate":"2026-03-26","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://support.apple.com/en-us/120324 ; https://support.apple.com/en-us/120331 ; https://support.apple.com/en-us/120338 ; https://nvd.nist.gov/vuln/detail/CVE-2023-43000","product":"Multiple Products","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","shortDescription":"Apple macOS, iOS, iPadOS, and Safari 16.6 contain a use-after-free vulnerability due to the processing of maliciously crafted web content that may lead to memory corruption.","vendorProject":"Apple","vulnerabilityName":"Apple Multiple products Use-After-Free Vulnerability"},"kev_checked":1794522003,"products":"Apple macOS, Apple iOS and iPadOS, Apple Safari","references":["https://support.apple.com/en-us/120331","https://support.apple.com/en-us/120338","https://support.apple.com/en-us/120324","https://support.apple.com/en-us/126632","https://cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kit","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-43000"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","provider":"CISA-ADP","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Apple Multiple products Use-After-Free Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}