Skip to content
Weekly Signal
Live intelligence Updated 20 Aug 2026 · 23:28 UTC

Apple · iOS, iPadOS, and macOS, Ipados, Iphone Os +1 more

CVE-2023-28206

Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability

Recommended action

Validate affected assets and exposure now, then remediate on an accelerated schedule. Apple Security release notes HT213720

View response plan
CVSS8.6
EPSS24.5%
KEVYes
ExploitationConfirmed exploitation
RemediationFixed release identified ↓

Assessment

Why it matters

CISA lists this vulnerability as known to be exploited; exploitation is confirmed; EPSS is 24.5%; technical severity is CVSS 8.6.

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1, iOS 15.7.5 and iPadOS 15.7.5, macOS Big Sur 11.7.6. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.

Who should care

  • Teams operating iOS, iPadOS, and macOS, Ipados, Iphone Os +1 more
  • Vulnerability and exposure management teams
  • Security operations teams monitoring exploitation activity

Response plan

What I would do

  1. Confirm whether iOS, iPadOS, and macOS, Ipados, Iphone Os +1 more is present in the environment.
  2. Identify affected versions and establish whether vulnerable services are exposed or reachable.
  3. Apple Security release notes HT213720
  4. Review relevant security telemetry for evidence of attempted or successful exploitation.
  5. Document the remediation decision and track it to verified completion.

Treatment intelligence

Remediation intelligence

Not yet verified

Vendor sources are listed before government and third-party guidance. Confirm product applicability and change prerequisites before deployment.

Verification noteAutomated link verification has not completed for this guidance yet.

Upgrade

Required Action

Technical details

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CWE
CWE-787
Affected versions
Apple iOS, iPadOS, and macOS; Apple Ipados (End Excluding 15.7.5 | Start Including 16.0, End Excluding 16.4.1); Apple Iphone Os (End Excluding 15.7.5 | Start Including 16.0, End Excluding 16.4.1); Apple macOS (End Excluding 11.7.6 | Start Including 12.0, End Excluding 12.6.5 | Start Including 13.0, End Excluding 13.3.1)
Fixed versions
Apple Ipados (Fixed from 15.7.5, 16.4.1); Apple Iphone Os (Fixed from 15.7.5, 16.4.1); Apple macOS (Fixed from 11.7.6, 12.6.5, 13.3.1)
Published
10 April 2023
Attack vector
Local
Privileges required
None
User interaction
Required

Signal timeline

  1. CVE published
  2. Added to CISA KEV
  3. Latest EPSS score: 24.5%
  4. Signal calculated at 74

External references

Live public intelligence This assessment combines public-source evidence. Validate the affected product, version and exposure against your own environment before making a risk decision.