What is CVE-2023-32409?

CVE-2023-32409 is a high-severity vulnerability affecting a range of Apple devices, including iPhones, iPads, Mac computers, Apple Watches, and Apple TVs. This security issue allows a remote attacker to break out of the Web Content sandbox, potentially leading to unauthorized access and data breaches. Apple has addressed the vulnerability with improved bounds checks in various software updates, including iOS, iPadOS, macOS Ventura, watchOS, and tvOS. It is crucial for users to update their devices to protect against potential exploitation.

Who is impacted by this?

Specifically, it impacts Apple Safari up to version 16.4, iPadOS and iPhone OS from version 16.0 to 16.4, macOS from version 13.0 to 13.3, tvOS up to version 16.4, and watchOS up to version 9.4. Users of these devices and software versions should be aware of this security issue and take necessary precautions.

What should I do if I’m affected?

If you're affected by the CVE-2023-32409 vulnerability, it's crucial to update your Apple devices to the latest software versions. Here's a simple step-by-step guide:

1. For iPhones and iPads, update to iOS 16.5 and iPadOS 16.5.

2. For Mac computers, update to macOS Ventura 13.4.

3. For Apple TVs, update to tvOS 16.5.

4. For Apple Watches, update to watchOS 9.5.

By updating your devices, you'll benefit from improved security and protection against potential threats.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-32409 vulnerability, known as Apple Multiple Products WebKit Sandbox Escape Vulnerability, is listed in CISA's Known Exploited Vulnerabilities Catalog. It was added on May 22, 2023, with a due date of June 12, 2023.

CVE-2023-32409 Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as Insufficient Information, indicating a lack of specific details about the vulnerability and its mitigation.

Learn More

For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or refer to the sources listed below.

• Apple Support: About the security content of iOS 16.5 and iPadOS 16.5

• Apple Support: About the security content of macOS Ventura 13.4

• Apple Support: About the security content of tvOS 16.5

• Apple Support: About the security content of watchOS 9.5