CVE-2023-38136

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, watchOS 9.6. An app may be able to execute arbitrary code with kernel privileges.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
AppleiOS and iPadOS>= unspecified, < 16.6
ApplewatchOS>= unspecified, < 9.6

References

Timeline

Published
Jul 27, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-381386.1A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which allows an attacCVE-2023-381397.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-38144.9The Advanced File Manager WordPress plugin before 5.1.1 does not adequately authorize its usage on multisite installations, allowing site adCVE-2023-381405.5Windows Kernel Information Disclosure VulnerabilityCVE-2023-381417.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-381427.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-381437.8Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2023-381447.8Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2023-381468.8Windows Themes Remote Code Execution VulnerabilityCVE-2023-381478.8Windows Miracast Wireless Display Remote Code Execution VulnerabilityCVE-2023-381488.8Internet Connection Sharing (ICS) Remote Code Execution VulnerabilityCVE-2023-381497.5Windows TCP/IP Denial of Service Vulnerability
CVE-2023-38136: High severity, CVSS 7.8 | Vulnix