{"id":"CVE-2023-42824","aliases":["EUVD-2023-47245","GHSA-3rg4-6v45-69gj"],"status":"published","title":"The issue was addressed with improved checks. This issue is fixed in iOS 17.0.3 and iPadOS 17.0.3...","description":"The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00971,"percentile":0.62195,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"published":"2023-10-04T18:02:20Z","modified":"2026-06-17T06:24:36Z","kev":{"date_added":"2023-10-05","due_date":"2023-10-26","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2023-10-05"},{"source":"kev","since":"2023-10-05"}],"exploits":[{"source":"pocgithub","id":"619555798/cve-2023-42824","title":"619555798/cve-2023-42824","date":"2026-02-14","url":"https://github.com/619555798/cve-2023-42824"}],"products":[{"vendor":"apple","product":"ios and ipados"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"}],"references":[{"url":"https://support.apple.com/en-us/HT213972","tags":["x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT213972","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT213961","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-42824","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-42824"},{"url":"https://support.apple.com/en-us/HT213961"},{"url":"http://seclists.org/fulldisclosure/2023/Oct/12"},{"url":"http://seclists.org/fulldisclosure/2023/Oct/16"},{"url":"https://github.com/advisories/GHSA-3rg4-6v45-69gj"}],"sources":{"cve":[{"id":"CVE-2023-42824","description":"The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.","status":"published","published":"2023-10-04T18:02:20.884Z","modified":"2025-11-04T19:22:01.229Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"updated_at":"2026-11-02T14:35:18.16233Z"}],"euvd":[{"id":"EUVD-2023-47245","description":"The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.","status":"published","published":"2023-10-04T18:02:20Z","modified":"2025-11-04T19:22:01Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2023-10-05","updated_at":"2026-11-02T19:49:22.047381Z"}],"ghsa":[{"id":"GHSA-3rg4-6v45-69gj","title":"The issue was addressed with improved checks. This issue is fixed in iOS 17.0.3 and iPadOS 17.0.3...","description":"The issue was addressed with improved checks. This issue is fixed in iOS 17.0.3 and iPadOS 17.0.3. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.","status":"published","published":"2023-10-04T21:30:22Z","modified":"2025-10-22T00:32:51Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:04:06.493434Z"}],"kev":[{"id":"CVE-2023-42824","title":"Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability","description":"Apple iOS and iPadOS contain an unspecified vulnerability that allows for local privilege escalation.","kev":{"date_added":"2023-10-05","due_date":"2023-10-26","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.234141Z"}],"nvd":[{"id":"CVE-2023-42824","description":"The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.","status":"published","published":"2023-10-04T19:15:10.49Z","modified":"2026-06-17T06:24:36.06Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"updated_at":"2026-11-02T14:08:35.022405Z"}]}}