Skip to content
CVE Tracker
Back

CVE-2023-38136

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, watchOS 9.6. An app may be able to…

High7.8EPSS 0.33%
Published
Updated
Reserved
Assigned by
apple

Description

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, watchOS 9.6. An app may be able to execute arbitrary code with kernel privileges.

Scores

CVSS scores of CVE-2023-38136, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.1High7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.33% · top 74% of all CVEs (2 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: total

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Weakness

  • An app may be able to execute arbitrary code with kernel privileges

Affected products

  • Apple · iOS and iPadOS

    • affected unspecified – < 16.6

  • Apple · watchOS

    • affected unspecified – < 9.6

References (2)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .