CVE-2023-42888
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Summary
CVE-2023-42888 is a cyber vulnerability that affects various products including iOS, iPadOS, watchOS, and macOS. The issue has been fixed in specific versions of these operating systems such as iOS 16.7.5 and iPadOS 16.7.5. The vulnerability arises from processing a maliciously crafted image, which could lead to the disclosure of process memory. It has a risk score of 26 and a base severity rating of MEDIUM according to [email protected]. The exploitability score is 1.8, indicating a low attack complexity and no privileges required for exploitation. The potential danger lies in the high confidentiality impact it poses to organizations, as user interaction is required for the vulnerability to be exploited locally on affected devices.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions