7.8
High
Exploited
CVE-2023-32434 Apple Multiple Products Integer Overflow Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Not observed so far
Weakness
CWE-190
Description
An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, watchOS 8.8.1, iOS 16.5.1 and iPadOS 16.5.1, macOS Ventura 13.4.1. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| macOS 11.7 | earliest → < 11.7 | 11.7 |
| iOS and iPadOS 16.5 | earliest → < 16.5 | 16.5 |
| watchOS 9.5 | earliest → < 9.5 | 9.5 |
References
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- seclists.org seclists.org
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of macOS
The 3813 CVEs of macOS →
CVE-2026-86925
An authorization issue was addressed with improved state management
5.5
Medium
CVE-2026-84627
A buffer overflow was addressed with improved bounds checking
7.8
High
CVE-2026-113945
An out-of-bounds read was addressed with improved bounds checking
5.5
Medium
CVE-2026-65327
A logic issue was addressed with improved checks
8.4
High