CVE-2023-42824: Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability

High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2023-10-05. EPSS: 1.1% chance of exploitation in the next 30 days.

The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.

Affected products

• Apple iPadOS: before 16.7.1 (fixed in 16.7.1); from 17.0, before 17.0.3 (fixed in 17.0.3)
• Apple iPhone OS: before 16.7.1 (fixed in 16.7.1); from 17.0, before 17.0.3 (fixed in 17.0.3)

Published 2023-10-04. Last modified 2026-06-17.