CVE-2023-40441: Apple iPadOS

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to a denial-of-service.

Affected products

• Apple iPadOS: before 17.0 (fixed in 17.0)
• Apple iPhone OS: before 17.0 (fixed in 17.0)
• Apple macOS: before 14.0 (fixed in 14.0)

Published 2023-09-27. Last modified 2026-06-17.