CVE-2023-32434: high-severity vulnerability in Apple watchOS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Apply updates per vendor instructions.
A flaw in how Apple systems handle very large numbers (integer overflow) could allow a malicious app to run malicious code with the highest system privileges. This is a serious issue because it gives attackers complete control over your device.
An integer overflow vulnerability in Apple's kernel allows a local attacker to bypass input validation and execute arbitrary code with kernel-level privileges. The vulnerability affects multiple iOS, macOS, and watchOS versions; active exploitation has been confirmed in the wild on older iOS versions prior to 15.7.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.