VDB
CVE-2023-28206
CVE-2023-28206
PUBLISHED
KEV
De multiples vulnérabilités ont été découvertes dans les produits Apple. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et une élévation de privilèges. Apple indique que ces vulnérabilités sont activement exploitées. De plus, une preuve de concept est disponible publiquement pour la vulnérabilité C<span class="pl-c">VE-2023-28206.</span>
EPSS 23.22% · 97.7th percentile
Risk Scores
EPSS Score
23.22%
97.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Safari | |
| Apple | N/A | |
| Apple | macOS |
Timeline
- Apr 7, 2023 VulnCheck KEV Exploitation
- Apr 7, 2023 PoC Published
- Apr 10, 2023 CVE Published
- Apr 10, 2023 CISA KEV Added
- Apr 10, 2023 VulnCheck KEV Exploitation
- Apr 10, 2023 PoC Published
- Apr 10, 2023 PoC Published
- Apr 10, 2023 PoC Published
- Apr 11, 2023 EPSS Score
- Apr 11, 2023 PoC Published
- Apr 11, 2023 PoC Published
- Apr 11, 2023 PoC Published
References
- https://support.apple.com/en-us/HT213720 advisory
- https://support.apple.com/en-us/HT213721 advisory
- https://support.apple.com/en-us/HT213722 advisory
- https://support.apple.com/en-us/HT213723 advisory
- https://cert.ssi.gouv.fr/avis/CERTFR-2023-AVI-0296/ advisory
- https://support.apple.com/en-us/HT213725 advisory
- https://support.apple.com/en-us/HT213724 advisory