Security Resilience

CVE-2023-42852

Apple Ipados ≤ 16.7.2

Published
25 October 2023
Modified
05 May 2025
Patch / advisory
View advisory
CVSS Score v3.1 8.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score 0.017 77th percentile
Risk Priority 68 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-42852 is a high-severity an unspecified weakness vulnerability in Apple Ipados. Its CVSS base score is 8.8 (High).

Operationally, ranked in the top 23% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code…

more

execution.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2023-41074Same product: Apple Ipados
CVE-2023-41983Same product: Apple Ipados
CVE-2023-27954Same product: Apple Ipados
CVE-2021-30858Same product: Apple Ipados
CVE-2023-42883Same product: Apple Ipados
CVE-2023-35074Same product: Apple Ipados
CVE-2023-27932Same product: Apple Ipados
CVE-2021-1871Same product: Apple Ipados
CVE-2021-30952Same product: Apple Ipados
CVE-2023-42916Same product: Apple Ipados

Affected Assets

apple
safari
≤ 17.1
apple
ipados
≤ 16.7.2 · 17.0 — 17.1
apple
iphone os
≤ 16.7.2 · 17.0 — 17.1
apple
macos
14.0 — 14.1
apple
tvos
≤ 17.1
apple
watchos
≤ 10.1
fedoraproject
fedora
37
debian
debian linux
11.0, 12.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References