Vulnerability Details : CVE-2023-42824
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.
CVE-2023-42824 is in the CISA Known Exploited Vulnerabilities Catalog
CISA vulnerability name:
Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability
CISA required action:
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA description:
Apple iOS and iPadOS contain an unspecified vulnerability that allows for local privilege escalation.
Notes:
https://support.apple.com/en-us/HT213961; https://nvd.nist.gov/vuln/detail/CVE-2023-42824
Added on
2023-10-05
Action due date
2023-10-26
Exploit prediction scoring system (EPSS) score for CVE-2023-42824
0.06%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 25 %
Percentile, the proportion of vulnerabilities that are scored at or less