LiveActive security incident?Get immediate response
CVE Record

CVE-2023-42824: The issue was addressed with improved checks.

The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.

HighCVSS 7.8Known exploitedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysishigh

Security readout for executives and security teams

Plain-English summary

CVE-2023-42824 is an Apple iOS and iPadOS privilege escalation flaw. A local attacker who already has some access to a device may gain higher privileges. Apple fixed it with improved checks, and both Apple and CISA indicate exploitation has been reported or confirmed.

Executive priority

Treat this as urgent for Apple mobile fleets because it is KEV-listed and tied to reported active exploitation. Prioritize patch compliance over investigation unless telemetry shows suspicious device activity.

Technical view

The CVSS 3.1 score is 7.8 with local attack vector, low complexity, low privileges required, no user interaction, and high confidentiality, integrity, and availability impact. Public details do not name the component or bug class beyond Apple’s improved checks description.

Likely exposure

Exposure is most likely on managed or personal iPhones and iPads running affected iOS or iPadOS versions, especially versions not updated to iOS 16.7.1 or iPadOS 16.7.1 where applicable.

Exploitation context

CISA lists CVE-2023-42824 in the Known Exploited Vulnerabilities catalog. Apple also states it is aware of a report that the issue may have been actively exploited against iOS versions before iOS 16.6.

Researcher notes

Available public detail is sparse. The sources support local privilege escalation, reported exploitation, and fixed Apple releases, but they do not provide component-level root cause, exploit mechanics, or detailed indicators.

Mitigation direction

  • Update affected devices to iOS 16.7.1 or iPadOS 16.7.1 where applicable.
  • Check Apple security guidance for other supported fixed releases.
  • Prioritize managed, executive, administrator, and high-risk user devices.
  • Enforce mobile device management update compliance where available.

Validation and detection

  • Inventory iOS and iPadOS versions across managed devices.
  • Flag devices below Apple’s fixed versions for remediation.
  • Confirm CISA KEV tracking includes this CVE in vulnerability workflows.
  • Review MDM compliance reports after update deployment.
Prepared
Confidence
high
Sources
5

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2023-42824 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
High
CVSS
7.8 (3.1)
Known Exploited
Yes
Published

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

1CVSS vectors
0Timeline events
0ADP providers
5Source links

CISA KEV status

Status
Known exploited
Source
CISA / ADP
Date added
Not provided

CVSS vector scores

1 official score

We collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.

ScoreVersionSeverityVectorExploitImpactSource
7.8CVSS 3.1HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H1.85.9Primary CVE score

Vulnerability scoring details

Base CVSS 3.1 score

7.8High
CVSS 3.1 vector shape for CVE-2023-42824Attack VectorAttack ComplexityPrivileges RequiredUser InteractionScopeConfidentiality ImpactIntegrity ImpactAvailability Impact

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NetworkAdjacentLocalPhysical
Attack Complexity
LowHigh
Privileges Required
NoneLowHigh
User Interaction
NoneRequired
Scope
ChangedUnchanged
Confidentiality Impact
HighLowNone
Integrity Impact
HighLowNone
Availability Impact
HighLowNone

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
AppleiOS and iPadOSunspecifiedListed
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.