wid-sec-w-2026-0705 · Published 2026-03-11 · View on BSI CERT-Bund ↗

Apple iOS and iPadOS: Multiple Vulnerabilities

CVSS 8.8 HIGH CISA KEV — Known Exploited

Risk Summary

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.

CVEs (4)

CVE-2023-41974 CVE-2023-43000 CVE-2024-23222 CVE-2023-43010

Affected Vendors

Apple

Affected Products (8)

Apple · iOS <15.8.7

Apple · iOS 15.8.7

Apple · iOS <16.7.15

Apple · iOS 16.7.15

Apple · iPadOS <15.8.7

Apple · iPadOS 15.8.7

Apple · iPadOS <16.7.15

Apple · iPadOS 16.7.15

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more