{"id":"CVE-2023-28201","aliases":["EUVD-2023-31909","GHSA-c8hj-7v4h-6ccv"],"status":"published","title":"This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13...","description":"This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4. A remote user may be able to cause unexpected app termination or arbitrary code execution.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01174,"percentile":0.67775,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-362"],"published":"2023-05-08T00:00:00Z","modified":"2026-06-17T05:47:05Z","products":[{"vendor":"apple","product":"ios and ipados"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"macos"},{"vendor":"apple","product":"safari"},{"vendor":"apple","product":"tvos"}],"references":[{"url":"https://support.apple.com/en-us/HT213670","tags":["x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213671","tags":["x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213676","tags":["x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213674","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213673","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28201"},{"url":"https://support.apple.com/kb/HT213674"},{"url":"https://github.com/advisories/GHSA-c8hj-7v4h-6ccv"}],"sources":{"cve":[{"id":"CVE-2023-28201","description":"This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4. A remote user may be able to cause unexpected app termination or arbitrary code execution.","status":"published","published":"2023-05-08T00:00:00Z","modified":"2025-01-29T18:55:16.819Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:35:32.376766Z"}],"euvd":[{"id":"EUVD-2023-31909","description":"This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4. A remote user may be able to cause unexpected app termination or arbitrary code execution.","status":"published","published":"2023-05-08T00:00:00Z","modified":"2025-01-29T18:55:16Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T00:04:09.89712Z"}],"ghsa":[{"id":"GHSA-c8hj-7v4h-6ccv","title":"This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13...","description":"This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, Safari 16.4, iOS 16.4 and iPadOS 16.4. A remote user may be able to cause unexpected app termination or arbitrary code execution","status":"published","published":"2023-05-08T21:31:08Z","modified":"2025-01-29T21:32:25Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:59:43.349858Z"}],"nvd":[{"id":"CVE-2023-28201","description":"This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4. A remote user may be able to cause unexpected app termination or arbitrary code execution.","status":"published","published":"2023-05-08T20:15:19.747Z","modified":"2026-06-17T05:47:05.343Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:08:01.131774Z"}]}}