CVE-2023-28206 · Sandworm Watch

Apr 10, 2023high

CVE-2023-28206: Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability

Apple iOS, iPadOS, and macOS IOSurfaceAccelerator contain an out-of-bounds write vulnerability that allows an app to execute code with kernel privileges. Required action: Apply updates per vendor instructions.

CVE-2023-28206EPSS 24.5%AppleiOS, iPadOS, and macOS

CISA KEV ↗ · unattributed attribution