Cyber Resilience

CVE-2023-40446

Apple Ipados ≤ 16.7.2

Published
12 December 2023
Modified
04 November 2025
Patch / advisory
View advisory
CVSS Score v3.1 7.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score 0.0026 18th percentile
Risk Priority 56 floored blend · peak EPSS

Summary

CVE-2023-40446 is a high-severity an unspecified weakness vulnerability in Apple Ipados. Its CVSS base score is 7.8 (High).

Operationally, ranked at the 18th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. Processing maliciously crafted input may lead to arbitrary code execution in user-installed apps.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2023-27955Same product: Apple Ipados
CVE-2026-28929Same product: Apple Ipados
CVE-2023-23530Same product: Apple Ipados
CVE-2023-23520Same product: Apple Ipados
CVE-2026-28819Same product: Apple Ipados
CVE-2024-40854Same product: Apple Ipados
CVE-2023-40398Same product: Apple Ipados
CVE-2023-38425Same product: Apple Ipados
CVE-2024-27848Same product: Apple Ipados
CVE-2022-22587Same product: Apple Ipados

Affected Assets

apple
ipados
≤ 16.7.2 · 17.0 — 17.1
apple
iphone os
≤ 16.7.2 · 17.0 — 17.1
apple
macos
12.0.0 — 12.7.1

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References