CVE-2023-32409
Exploited in the Wild
✓ Confirmed 0-Day
★ Google Project Zero
Triaged: Feb. 18, 2026
22 articles
EPSS Score
Source: FIRST.org · 2026-05-24
0.31%
probability
This CVE has a 0.31% probability
of being exploited in the next 30 days.
0%
Top 54.3th percentile of all CVEs
100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE.
View on VulnerabilityLookup ↗
Description
Project ZeroWebContext sandbox escape
Google Project Zero
Patched
May 18, 2023
Reported by
Clément Lecigne of Google's Threat Analysis Group and Donncha Ó Cearbhaill of Amnesty International’s Security Lab
Root Cause Analysis
???
Apple fixes zero-day exploited in 'extremely sophisticated' attacks
BleepingComputer
Feb 10, 2025
Apple fixes this year’s first actively exploited zero-day bug
BleepingComputer
Jan 27, 2025
Apple fixes iOS Kernel zero-day vulnerability on older iPhones
BleepingComputer
Oct 12, 2023
Apple emergency update fixes new zero-day used to hack iPhones
BleepingComputer
Oct 04, 2023
Apple fixes new zero-day used in attacks against iPhones, Macs
BleepingComputer
Jul 24, 2023
Apple fixes zero-days used to deploy Triangulation spyware via iMessage
BleepingComputer
Jun 21, 2023
Apple releases emergency update to fix zero-day exploited in attacks
BleepingComputer
Jul 10, 2023
Apple fixes two zero-days used in attacks on Intel-based Macs
BleepingComputer
Nov 19, 2024
Apple re-releases zero-day patch after fixing browsing issue
BleepingComputer
Jul 12, 2023
Apple emergency updates fix 3 new zero-days exploited in attacks
BleepingComputer
Sep 21, 2023
Apple discloses 2 new zero-days exploited to attack iPhones, Macs
BleepingComputer
Sep 07, 2023
WebKit Under Attack: Apple Issues Emergency Patches for 3 New Zero-Day Vulnerabilities
TheHackerNews
Zero-Day Alert: Apple Releases Patches for Actively Exploited Flaws in iOS, macOS, and Safari
TheHackerNews
Apple fixes two new iOS zero-days exploited in attacks on iPhones
BleepingComputer
Mar 05, 2024
Apple fixes first zero-day bug exploited in attacks this year
BleepingComputer
Jan 22, 2024
Apple emergency updates fix recent zero-days on older iPhones
BleepingComputer
Dec 11, 2023
Apple fixes WebKit zero-day exploited in ‘extremely sophisticated’ attacks
BleepingComputer
Mar 11, 2025
Apple fixes two new iOS zero-days in emergency updates
BleepingComputer
Nov 30, 2023
Apple fixes three new zero-days exploited to hack iPhones, Macs
BleepingComputer
May 18, 2023
Apple backports BLASTPASS zero-day fix to older iPhones
BleepingComputer
Sep 12, 2023
Signal Intelligence
Confidence
92%
EPSS
0.31%
Mentions
22
Last Seen
Mar 11, 2025
CNA Information
Analyst Note
This zero-day vulnerability in Apple WebKit has been actively exploited in sophisticated attacks and is confirmed by multiple reputable sources including BleepingComputer and Google Project Zero. The high CVSS score (8.6), evidence of active exploitation, and patching across multiple Apple platforms (macOS, iOS, tvOS, watchOS) with official acknowledgment of the vulnerability being exploited all strongly support the CONFIRMED status.
Triage Info
Decided atFeb 18, 2026