CVE-2023-43010

Published Mar 12, 2026

Last updated a month ago

CVSS high 8.8

iOS

macOS Sonoma

Safari

Overview

AI description

Automated description summarized from trusted sources.

CVE-2023-43010 is a vulnerability found in WebKit, the browser engine used by Apple's Safari and other iOS applications. This issue was related to memory handling, where processing maliciously crafted web content could lead to memory corruption. Apple addressed this vulnerability by implementing improved memory handling. This WebKit flaw was part of a larger exploit kit known as "Coruna," which targeted older iPhone and iPad models that could not update to the latest iOS versions. Apple released security updates for these devices, including models like the iPhone 6s, iPhone 7, iPhone SE (1st generation), iPhone 8, iPhone 8 Plus, iPhone X, iPad Air 2, and iPad mini (4th generation), to backport the fix for CVE-2023-43010.

Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.2, Safari 17.2, iOS 16.7.15 and iPadOS 16.7.15, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.
Source: product-security@apple.com
NVD status: Analyzed
Products: safari, ipados, iphone_os, macos

Risk scores

CVSS 3.1

Type: Secondary
Base score: 8.8
Impact score: 5.9
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

nvd@nist.gov: CWE-787

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "A894FAB1-74AE-4B4F-A005-ED6A67606414",
            "versionEndExcluding": "17.2",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "1E574928-4E49-45B0-AE6E-DF4D38897F67",
            "versionEndExcluding": "15.8.7",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "C354A23C-6F79-4186-A883-FCF0C5FF441E",
            "versionEndExcluding": "16.7.15",
            "versionStartIncluding": "16.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "D0997B97-8D18-41AC-85DD-3605A5DBCA35",
            "versionEndExcluding": "17.2",
            "versionStartIncluding": "17.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "D1E9DC1A-618A-4CAF-96C7-EC5BA2C1F617",
            "versionEndExcluding": "15.8.7",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "48DD7DF0-8686-4DFF-8FA7-F5F0999D848B",
            "versionEndExcluding": "16.7.15",
            "versionStartIncluding": "16.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "C6DB531C-9534-461D-87D4-C2BA2BD1D9F6",
            "versionEndExcluding": "17.2",
            "versionStartIncluding": "17.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "A640ED58-0863-434D-B8B3-1FBF3B8D559D",
            "versionEndExcluding": "14.2",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.