CVE-2023-41974
Apple iOS and iPadOS Use-After-Free Vulnerability
Published Jan 10, 2024 · updated Jun 16, 2026 · Apple iOS and iPadOS
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An app may be able to execute arbitrary code with kernel privileges.
Timeline
Detection, updates, and resolution for this record.
Jan 10, 2024 · Catalog
Detected
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An app may be able to execute arbitrary code with kernel privileges.
Mar 5, 2026 · CISA KEV
Known exploited
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Mar 26, 2026 · CISA KEV
Remediation due
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Jun 16, 2026 · Catalog
Updated
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An app may be able to execute arbitrary code with kernel privileges.
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CISA due date Mar 26, 2026
Affected
- cpe apple/ipadosversion unspecified
- cpe apple/iphone osversion unspecified
- vendor Apple iOS and iPadOSversion unspecified
Sources
- CISA KEVCVE-2023-41974
Apple iOS and iPadOS contain a use-after-free vulnerability. An app may be able to execute arbitrary code with kernel privileges.
cisa.gov - CVE.orgCVE-2023-41974
Official CVE identifier
cve.org - FIRST EPSSCVE-2023-41974
30-day exploitation probability 2.0%
first.org - NIST NVDCVE-2023-41974
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An app may be able to execute arbitrary code with kernel privileges.
nvd.nist.gov