CVE-2023-28206: Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability

CVE-2023-28206 · Severity: critical · CVSS 8.6 · Exploited in the wild · Published 2023-04-10

An out-of-bounds write vulnerability in the IOSurfaceAccelerator component of Apple iOS, iPadOS, and macOS allows a local application to execute arbitrary code with kernel privileges. The issue was addressed through improved input validation and has been reported as being actively exploited in the wild.

Technologies: Apple iPadOS, Apple macOS, Apple watchOS, Cisco IOS. Vendors: Apple, Cisco.

Quick answers

Is CVE-2023-28206 exploited in the wild?
Yes. CVE-2023-28206 is known to be exploited in the wild, first recorded on 10 April 2023. Treat it as urgent.
How severe is CVE-2023-28206?
Critical severity, with a CVSS score of 8.6, published 10 April 2023.
Which products and versions are affected?
Apple iOS versions before 15.7.5, versions before 16.4.1; Apple iPadOS versions before 15.7.5, versions before 16.4.1; Apple macOS Ventura versions before 13.3.1; Apple macOS Monterey versions before 12.6.5; and 1 more.
Is there a fix for CVE-2023-28206?
A patch was published on 2023-04-10: Fixed in iOS 16.4.1, iPadOS 16.4.1, macOS Ventura 13.3.1, iOS 15.7.5, iPadOS 15.7.5, macOS Monterey 12.6.5, and macOS Big Sur 11.7.6 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2023-28206 attacked?
It is attacked with local access, in an operating system.
Am I affected by CVE-2023-28206?
Check whether you run Apple iPadOS, Apple macOS, Apple watchOS or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Affected products

  • Apple iOS versions before 15.7.5, versions before 16.4.1
  • Apple iPadOS versions before 15.7.5, versions before 16.4.1
  • Apple macOS Ventura versions before 13.3.1
  • Apple macOS Monterey versions before 12.6.5
  • Apple macOS Big Sur versions before 11.7.6

Timeline

  • 2023-04-10: disclosed
  • 2023-04-10: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
  • 2023-04-10: patched: Fixed in iOS 16.4.1, iPadOS 16.4.1, macOS Ventura 13.3.1, iOS 15.7.5, iPadOS 15.7.5, macOS Monterey 12.6.5, and macOS Big Sur 11.7.6
  • exploited: Apple is aware of reports that this issue may have been actively exploited.

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.