CVE-2023-41974

highpriority · act · 90OT risk · criticalKEV · exploitedEPSS 0.020 · 80 %ileDEEUNLUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV

Likely / severe?

1.96% (80th) EPSS

CVSS 7.8 · high

Is it mine?

16 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · cert_bund · ncsc_nl

added 2026-03-05remediate by 2026-03-26

required action Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

EPSS · scored 2026-10-22

Apple iOS and iPadOS Use-After-Free Vulnerability

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An app may be able to execute arbitrary code with kernel privileges.

cvss

Technical severity, 0–10. One row per scoring source.

7.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 1.8 · impact 5.9

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondaryexploitability 1.8 · impact 5.9

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · NCSC-NL NL

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: active · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-416USprimaryCWE-416US

affected products (16)

Products and version ranges known to be affected.

Apple iOS <15.8.7all versionscert_bundDE
Apple iPadOS <15.8.7all versionscert_bundDE
Apple IOS< 15.8.7cert_bundDE
Apple IOS< 16.7cert_bundDE
Apple IOS< 17cert_bundDE
Apple iPadOS< 15.8.7cert_bundDE
Apple iPadOS< 16.7cert_bundDE
Apple iPadOS< 17cert_bundDE
Apple iOS and iPadOSunspecified → 15.8.7enisa_euvdEU
Apple iOS and iPadOSunspecified → 17enisa_euvdEU
Apple IOS≤ vers:unknown/*ncsc_nlNL
Apple iPadOS≤ vers:unknown/*ncsc_nlNL
apple ipados< 15.8.7nvdUScpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
apple ipados16.0 → 17.0nvdUScpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
apple iphone os< 15.8.7nvdUScpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
apple iphone os16.0 → 17.0nvdUScpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

advisories (3)

Vendor and ecosystem advisories describing this.

NCSC-2026-0098Kwetsbaarheden verholpen in Apple iOS en iPadOSNL2026-03-13csaf · ncsc_nlNL
Apple heeft kwetsbaarheden verholpen in iOS 15 & 16 en iPadOS 15 & 16
WID-SEC-W-2023-2454Apple iOS und iPadOS: Mehrere SchwachstellenDeutsch2023-09-26csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen preiszugeben, Dateien zu manipulieren oder seine Privilegien zu erweitern.
WID-SEC-W-2026-0705Apple iOS und iPadOS: Mehrere SchwachstellenDeutsch2026-03-11csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um beliebigen Code auszuführen oder eine Speicherbeschädigung mit unbestimmten Folgen zu erreichen.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cert_bund ncsc_nl nvd NVD CVE.org MITRE

published 2024-01-10modified 2026-06-17

related (12,091)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-68820US	—OT critical	0.33% (25th)	KEV	2026-08-11
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-5281US	—OT critical	0.70% (53rd)	KEV	2026-04-01
Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page…
CVE-2026-2441US	high8.8OT critical	55.0% (99th)	KEV	2026-02-13
Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security sever…
CVE-2025-43529US	—OT critical	8.76% (95th)	KEV	2025-12-17
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2,…
CVE-2025-62221US	—OT critical	2.50% (85th)	KEV	2025-12-09
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

+12086 more

references (16)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan