VulnRadar

Data against noise.

Page generated: 10 Nov 2026, 19:00 UTC

CVE-2023-37450

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively…

Read full description

CVSS 8.8 (HIGH) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE

0.0/10

REALITY · THREAT PRIORITY

8.4/10

General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?

Recorded exploitation baseline: +7.00
Technical severity: CVSS 8.8: +1.32
Fresh EPSS: 18.95%: +0.09

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 12 documents and public datasets.

Hype components

Headline sample (25%)

0/100

Press, 30 days (60%)

0/100

Grounded branding (15%)

0/100

HYPE TOTAL0/100

Sources and documents

BleepingComputer

Press · 10 Feb 2025, 08:00 · Apple fixes zero-day exploited in 'extremely sophisticated' attacks - BleepingComputer

BleepingComputer

Press · 30 Nov 2023, 08:00 · Apple fixes two new iOS zero-days in emergency updates - BleepingComputer

BleepingComputer

Press · 07 Sep 2023, 07:00 · Apple discloses 2 new zero-days exploited to attack iPhones, Macs - BleepingComputer

Lookout

Press · 27 Jul 2023, 07:00 · iOS 16.5.1 | Threat Intel - Lookout

Help Net Security

Press · 25 Jul 2023, 07:00 · Apple fixes exploited zero-day in all of its OSes (CVE-2023-38606) - Help Net Security

See all 12 source documents

9to5Mac

Press · 24 Jul 2023, 07:00 · Apple fixes 16 security flaws with iOS 16.6, two actively exploited - 9to5Mac

Macworld

Press · 12 Jul 2023, 07:00 · Apple re-issues emergency security update for iPhones and Macs - Macworld

The Sun

Press · 12 Jul 2023, 07:00 · iPhone users notice something seriously wrong - and Apple says there's a reason - The Sun

Help Net Security

Press · 11 Jul 2023, 07:00 · Apple pushes out emergency fix for actively exploited zero-day (CVE-2023-37450) - Help Net Security

Forbes

Press · 11 Jul 2023, 07:00 · Apple Pulls iOS 16.5.1 (a)—Here’s What To Do - Forbes

BleepingComputer

Press · 11 Jul 2023, 07:00 · Apple confirms WebKit security updates break browsing on some sites - BleepingComputer

Bitsight

Press · 13 Jan 2023, 15:27 · 2023 Apple & iOS Vulnerabilities from CISA: Data - Bitsight

Score evolution

● Hype ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.4 (2026-11-02 15:13). The curve appears once the score changes.

Public exploit evidence

Public exploit entries / repo candidates

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence: Exploitation recorded
Priority basis: Recorded exploitation; CVSS 8.8; EPSS 18.9%
Attention, last 30 days: 0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential: network access, no prior privileges, user interaction.
Observed activity: Exploitation recorded in CISA KEV.
Known scale: Not quantified.
Evidence confidence basis: Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:58:56.083638+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline

First press mention

13 Jan 2023, 15:27

Added to the CISA KEV catalog

13 Jul 2023, 00:00

Published

26 Jul 2023, 23:21

Latest press mention

10 Feb 2025, 08:00

Score calculated

05 Nov 2026, 13:58