VDB
CVE-2023-41992
CVE-2023-41992
PUBLISHED
KEV
Es besteht eine Schwachstelle in Apple iOS und Apple iPadOS. Dieser Fehler besteht in der Kernel-Komponente aufgrund einer unsachgemäßen Überprüfung. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um seine Privilegien zu erweitern.
EPSS 1.06% · 78.0th percentile
Risk Scores
EPSS Score
1.06%
78.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Apple iOS <16.7 | |
| Apple | Apple iOS <17 | |
| Apple | Apple macOS Sonoma <14 | |
| Apple | Apple macOS Monterey <12.7 | |
| Apple | Apple iPadOS <17 | |
| Apple | Apple iPadOS <16.7 | |
| Apple | Apple macOS Ventura <13.6 |
Exploit Intelligence
- WHW0x455/CVE-2023-41992 (github-poc-repo)
- WHW0x455/CVE-2023-41992 (github-poc-repo)
- WHW0x455/CVE-2023-41992 (github-poc-repo)
- WHW0x455/CVE-2023-41992 (github-poc-repo)
- WHW0x455/CVE-2023-41992 (github-poc-repo)
- WHW0x455/CVE-2023-41992 (github-poc-repo)
- WHW0x455/CVE-2023-41992 (github-poc)
- WHW0x455/CVE-2023-41992 (github-poc)
- WHW0x455/CVE-2023-41992 (github-poc)
- WHW0x455/CVE-2023-41992 (github-poc)
…and 44 more exploits
Timeline
- Sep 21, 2023 PoC Published
- Sep 21, 2023 CVE Published
- Sep 22, 2023 EPSS Score
- Sep 25, 2023 CISA KEV Added
- Oct 24, 2023 EPSS Score
- Dec 27, 2023 EPSS Score
- Jan 28, 2024 EPSS Score
- Mar 1, 2024 EPSS Score
- May 4, 2024 EPSS Score
- Jun 5, 2024 EPSS Score
- Jul 7, 2024 EPSS Score
- Aug 8, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2427.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2427 advisory
- https://isc.sans.edu/diary/rss/30238 advisory
- https://support.apple.com/en-us/HT213927 advisory
- https://support.apple.com/en-us/HT213926 advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2453.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2453 advisory
- https://support.apple.com/en-us/HT213931 advisory
- https://support.apple.com/en-us/HT213932 advisory
- https://support.apple.com/en-us/HT213940 advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2454.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2454 advisory
- https://support.apple.com/en-us/HT213938 advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog exploit