CVE-2023-28206 — Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability

CISA KEVExploited: confirmedApple

Apple iOS, iPadOS, and macOS IOSurfaceAccelerator contain an out-of-bounds write vulnerability that allows an app to execute code with kernel privileges.

Vulnerability details

Affected productsiOS, iPadOS, and macOS
KEV remediation due2023-05-01