EXPOSURES › CVE-2023-41974

CVE-2023-41974

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2026-03-05 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2023-41974 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 rceexploited-in-wildunpatched

Apple iOS and iPadOS kernel exploited for arbitrary code execution

Apple iOS and iPadOS were found to have a use-after-free vulnerability that could allow an app to execute arbitrary code with kernel privileges, leading to a high-severity security risk.

Shame score — Critical vulnerability actively exploited in the wild with no patch available.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

apple · vendor iOS and iPadOS · product

DESCRIPTION

Apple iOS and iPadOS contain a use-after-free vulnerability. An app may be able to execute arbitrary code with kernel privileges.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.