Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsiTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Apple patched CVE-2023-23529, an actively exploited WebKit vulnerability, on February 13, 2023. It could let an attacker run code after a targeted user accessed maliciously crafted web content. The affected-version details below are historical; to check your device today, use its Software Update settings and install the current updates Apple offers for it.
What was the WebKit zero-day?
CVE-2023-23529 was a type-confusion vulnerability in WebKit, the browser engine used by Safari and by apps that display or process web content. Apple said it was aware of reports that the issue had been actively exploited. Its public notice did not describe the attacks in detail, so the available information does not establish how many devices were targeted or who was responsible.
The Centre for Cybersecurity Belgium described the flaw as exploitable when a user accessed a malicious website containing crafted web content. A successful attack could lead to arbitrary code execution on a vulnerable device. That is a potential consequence, not a claim that every visit to a malicious page would necessarily succeed.
Which Apple software and devices were covered in the 2023 advisory?
Apple released updates on February 13, 2023. The Centre for Cybersecurity Belgium advisory #2023-17, published February 14, listed these fixed versions and product families. These are release details from that advisory, not current update recommendations.
#1 Best Overall
- This phone is unlocked and compatible with any carrier of choice on GSM and CDMA networks (e.g. AT&T, T-Mobile, Sprint, Verizon, US Cellular, Cricket, Metro, Tracfone, Mint Mobile, etc.).
- Please check with your carrier to verify compatibility.
- The device does not come with headphones or a SIM card. It does include a generic (Mfi certified) charging cable.
- Tested for battery health and guaranteed to have a minimum battery capacity of 80%.
| Platform or software | Version listed in the February 2023 advisory | Affected families listed in the advisory |
|---|---|---|
| iOS | iOS 16.3.1 | iPhone 8 and later |
| iPadOS | iPadOS 16.3.1 | All iPad Pro models; iPad Air 3rd generation and later; iPad 5th generation and later; iPad mini 5th generation and later |
| macOS | macOS Ventura 13.2.1 | macOS Ventura, Big Sur, and Monterey |
| Safari | Safari 16.3.1 | The advisory lists Safari as affected software; it does not specify a separate device-family list for this entry. |
The advisory’s affected-software list names the fixed versions above, while its affected-products section names the device and macOS families. Those historical lists do not tell you whether an individual device is protected now: that depends on its installed software and the updates available for it.
Is my iPhone affected by the WebKit zero-day, and how do I update it?
If you used an iPhone 8 or later, it falls within the iPhone family named in the 2023 advisory. That does not by itself establish its current patch status. Check the installed version and apply the current update offered by Apple for your device.
Rank #2
- 6.9" LTPO Super Retina XDR OLED, 120Hz, HDR10, Dolby Vision, 1320x2868px at 460ppi, 1000 nits (typ), 2000 nits (HBM), 4685mAh Battery
- 1TB, 8GB RAM, Apple A18 Pro (3nm), Hexa-core (2x4.05 GHz + 4x2.42 GHz), Apple GPU 6-core, iOS 18, upgradable to iOS 18.3
- Rear camera: 48MP, f/1.8 (wide) + 12MP, f/2.8 (periscope telephoto) 5x optical zoom + 48MP, f/2.2 (ultrawide), TOF 3D LiDAR scanner (depth), Front Camera: 12MP, f/1.9 (wide)
- 2G: 850/900/1800/1900, 3G: HSDPA 850/900/1700(AWS)/1900/2100, 4G LTE: 1/2/3/4/5/7/8/12/13/14/17/18/19/20/25/26/28/29/30/32/34/38/39/40/41/42/48/53/66/71, 1/2/3/5/7/8/12/14/20/25/26/28/29/30/38/40/41/48/53/66/70/71/75/76/77/78/79/258/260/261 SA/NSA/Sub6/mmWave - Dual eSIM
- Unlocked for freedom to choose your carrier. Compatible with both GSM & CDMA networks. The phone is unlocked to work with all GSM Carriers & CDMA Carriers Including AT&T, T-Mobile, Verizon, Sprint., Etc.
- On iPhone or iPad: Open Settings > General > Software Update.
- Review the update offered: Follow the on-screen prompts to download and install available software. The 2023 version numbers above are not a substitute for the current release offered to your device.
- On a Mac: Open Apple menu > System Settings > General > Software Update, then install the available update. The 2023 advisory named macOS Ventura, Big Sur, and Monterey; eligibility and current versions depend on the Mac and Apple’s present releases.
Apple’s February 2023 release addressed WebKit across the listed software. This article does not establish the current supported-release status of every device or whether a particular device can receive later security updates.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Was the kernel vulnerability part of the WebKit flaw?
No. The iOS and iPadOS updates also fixed CVE-2023-23514, a separate kernel use-after-free vulnerability. The Belgium advisory said that flaw could allow a malicious app to execute code with kernel privileges and described it as actively exploited to install malware. Those kernel-specific details should not be attributed to CVE-2023-23529, which was the WebKit type-confusion issue.
Rank #3
- 6.1inch Super Retina XDR display. Aluminum with color-infused glass back. Ring/Silent switch
- Dynamic Island. A magical way to interact with iPhone. A16 Bionic chip with 5-core GPU
- Advanced dual-camera system. 48MP Main | Ultra Wide. Super-high-resolution photos (24MP and 48MP). Next-generation portraits with Focus and Depth Control. 4X optical zoom range
- Emergency SOS via satellite. Crash Detection. Roadside Assistance via satellite
- Up to 26 hours video playback. USB C, Supports USB 2. Face ID
What the public notices did not establish
Apple credited an anonymous reporter for CVE-2023-23529. The public notices did not identify an attacker, publish operational attack details, or quantify the number of affected users or attacks. The supported conclusion is narrower: Apple reported awareness of active exploitation and issued software updates to address the flaw.
Quick Recap
Best Value
- 6.7inch Super Retina XDR display. ProMotion technology. Always-On display. Titanium with textured matte glass back. Action button
- Dynamic Island. A magical way to interact with iPhone. A17 Pro chip with 6-core GPU
- Pro camera system. 48MP Main | Ultra Wide| Telephoto. Super-high-resolution photos (24MP and 48MP). Next-generation portraits with Focus and Depth Control. Up to 10x optical zoom range
- Emergency SOS via satellite. Crash Detection. Roadside Assistance via satellite
- Up to 29 hours video playback. USB-C, Supports USB 3 for up to 20x faster transfers. Face ID
Rank #4
- This pre-owned product is not Apple certified, but has been professionally inspected, tested and cleaned by Amazon-qualified suppliers.
- There will be no visible cosmetic imperfections when held at an arm’s length.
- This product is eligible for a replacement or refund within 90 days of receipt if you are not satisfied.
- Product may come in generic Box.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
