CVE-2023-32435: Apple Multiple Products WebKit Memory Corruption

Apple Multiple Products WebKit Memory Corruption Vulnerability. Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

• CISA KEV-listed (remediation due 2023-07-14)
• EPSS 0.4% (62.1% percentile)

Related briefings

• Operation Triangulation: Four Zero-Days Including Undocumented GPU CoreSight MMIO Hardware Feature Used to Bypass Apple PPL in Most Sophisticated iOS Attack Chain Ever Analyzed 2026-02-16

Browse the CVE database

Read the full analysis on IntelFusions