ZeroDay Findings
Sign inSign up

Findings

CVE-2023-41992

Apple Multiple Products Kernel Privilege Escalation Vulnerability

Published Sep 21, 2023 · updated Jun 16, 2026 · apple ipados

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 21, 2023 · Catalog

    Detected

    The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

  2. Sep 25, 2023 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  3. Oct 16, 2023 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  4. Jun 16, 2026 · Catalog

    Updated

    The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA due date Oct 16, 2023

Affected

  • cpe apple/ipadosversion unspecified
  • cpe apple/ipados17.0
  • cpe apple/iphone osversion unspecified
  • cpe apple/iphone os17.0
  • cpe apple/macosversion unspecified
  • vendor Apple Multiple Productsversion unspecified

Sources

  • CISA KEVCVE-2023-41992

    Apple iOS, iPadOS, macOS, and watchOS contain an unspecified vulnerability that allows for local privilege escalation.

    cisa.gov
  • CVE.orgCVE-2023-41992

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2023-41992

    30-day exploitation probability 9.5%

    first.org
  • NIST NVDCVE-2023-41992

    The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against ve

    nvd.nist.gov

References