Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2023-42916

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.

CVSS 6.5 · MediumBuzz score 65.2KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 65.2

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 25.6 · diversity 14.5 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
25.6
12 evidence mentions in the snapshot
Diversity score
14.5
5 sources across 2 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
12 source links · newest first
  • Hackers find a ‘Shortcut’ to data stored on iPhones, iPads, and MacsCSO Online

    Apple has advised users to patch their devices against a vulnerability affecting the Apple Shortcuts application that can allow hackers to access sensitive data without invoking user permission. Tracked as CVE-2024-23204, the flaw has a critical rating (CVSS 7.5/10) because of its zero-click exploitation, affecting a range of Apple devices including MacBooks, iPhones, iPads, and […]

    newswww.csoonline.comFeb 23, 2024, 12:05 PM
  • Google Links Over 60 Zero-Days to Commercial Spyware VendorsSecurityWeek

    More than 60 of the Adobe, Google, Android, Microsoft, Mozilla and Apple zero-days that have come to light since 2016 attributed to spyware vendors.

    newswww.securityweek.comFeb 6, 2024, 10:49 AM
  • Apple fixes actively exploited WebKit zero-day (CVE-2024-23222)Help Net Security

    Apple has fixed an actively exploited zero-day vulnerability (CVE-2024-23222) that affects Macs, iPhones, iPads and AppleTVs. About CVE-2024-23222 CVE-2024-23222 is a type confusion issue that affects WebKit – Apple’s browser engine used in the Safari web browser and all iOS and iPadOS web browsers. “Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited,” Apple noted in the software release notes. … More →

    newswww.helpnetsecurity.comJan 23, 2024, 11:35 AM
  • Apple Ships iOS 17.3, Warns of WebKit Zero-Day ExploitationSecurityWeek

    Apple pushes out fresh versions of its iOS and macOS platforms to fix WebKit vulnerabilities being exploited as zero-day in the wild.

    newswww.securityweek.comJan 22, 2024, 7:50 PM
  • Apple released iOS 17.2 to address a dozen of security flawsSecurity Affairs

    Apple rolled out emergency security updates to backport patches for two actively exploited zero-day flaws to older devices. The company released iOS 17.2 and iPadOS 17.2 which address a dozen of security flaws. The most severe flaw is a memory corruption issue that resides in the ImageIO. Successful exploitation of the flaw may lead to arbitrary code […]

    newssecurityaffairs.comDec 12, 2023, 8:13 AM
  • CISA Urges Federal Agencies to Patch Exploited Qualcomm VulnerabilitiesSecurityWeek

    CISA has added to its Known Exploited Vulnerabilities Catalog four Qualcomm bugs, including three exploited as zero-days.

    newswww.securityweek.comDec 6, 2023, 12:05 PM
  • 4th December – Threat Intelligence ReportCheck Point Research

    For the latest discoveries in cyber research for the week of 4th December, please download our Threat_Intelligence Bulletin. TOP ATTACKS AND BREACHES Check Point Research provides highlights about Cyber Av3ngers group activity, which has taken responsibility on defacing workstations at Pennsylvania’s Aliquippa municipal water authority. Following the attack, CISA has published an advisory about this […]

    vendorresearch.checkpoint.comDec 4, 2023, 9:38 AM
  • Week in review: PoC for Splunk Enterprise RCE flaw released, scope of Okta breach widensHelp Net Security

    Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Vulnerability disclosure: Legal risks and ethical considerations for researchers In this Help Net Security interview, Eddie Zhang, Principal Consultant at Project Black, explores the complex and often controversial world of vulnerability disclosure in cybersecurity. How passkeys are reshaping user security and convenience In this Help Net Security interview, Anna Pobletts, Head of Passwordless at 1Password, talks about passkey adoption and … More →

    newswww.helpnetsecurity.comDec 3, 2023, 9:00 AM
  • Apple patches info-stealing, zero day bugs in iPads and MacsCSO Online

    Apple has released patches for a couple of security issues found within its Webkit web browser engine that the iPhone maker believes have had zero day exploitations. Tracking them as CVE-2023-42916, and CVE-2023-42917, Apple said these vulnerabilities can be exploited while processing web content to leak sensitive information and execute arbitrary codes, respectively. “Apple is […]

    newswww.csoonline.comDec 1, 2023, 12:14 PM
  • Apple patches two zero-days used to target iOS users (CVE-2023-42916 CVE-2023-42917)Help Net Security

    With the latest round of security updates, Apple has fixed two zero-day WebKit vulnerabilities (CVE-2023-42916, CVE-2023-42917) that “may have been exploited against versions of iOS before iOS 16.7.1.” About the vulnerabilities (CVE-2023-42916, CVE-2023-42917) CVE-2023-42916 is a out-of-bounds read flaw, while CVE-2023-42917 is a vulnerability allowing for exploitable memory corruption. Both affect WebKit, the Apple-developed browser engine used by the company’s Safari web browser and all web browsers on iOS and iPadOS. CVE-2023-42916 may lead to … More →

    newswww.helpnetsecurity.comDec 1, 2023, 9:23 AM
  • Apple addressed 2 new iOS zero-day vulnerabilitiesSecurity Affairs

    Apple released emergency security updates to fix two actively exploited zero-day flaws impacting iPhone, iPad, and Mac devices. Apple released emergency security updates to address two zero-day vulnerabilities impacting iPhone, iPad, and Mac devices. The flaws are actively exploited in attacks in the wild, both issues reside in the WebKit browser engine. The first vulnerability, […]

    newssecurityaffairs.comNov 30, 2023, 10:33 PM
  • Apple Patches WebKit Flaws Exploited on Older iPhonesSecurityWeek

    Apple’s security response team warns that flaws CVE-2023-42916 and CVE-2023-42917 were already exploited against versions of iOS before iOS 16.7.1.

    newswww.securityweek.comNov 30, 2023, 7:14 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence