Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
uaf-2023-28205 — PoC CVE-2023-28205: Apple WebKit Use-After-Free Vulnerability | Kitploit
Tools/GitHubGitHub/ntfargo/uaf-2023-28205
Memory ForensicsVulnerability AnalysisExploitationWeb SecurityBinary Exploitation
GitHubntfargo/uaf-2023-28205

uaf-2023-28205

PoC CVE-2023-28205: Apple WebKit Use-After-Free Vulnerability

View Repository
1751 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
Website

CVE-2023-28205: Apple WebKit Use-After-Free Vulnerability

This vulnerability can be exploited through maliciously crafted web content, allowing attackers to execute arbitrary code.

Description

The code triggers a use-after-free (UAF) vulnerability by delaying the addition of Map and Date objects, which allows the garbage collector (GC) to free them. This can potentially lead to accessing freed objects, causing memory corruption or enabling exploits.

References

  • WebKit Commit c9880de4a28b9a64a5e1d0513dc245d61a2e6ddb

CVE-2023-28205: Clément Lecigne of Google's Threat Analysis Group and Donncha Ó Cearbhaill of Amnesty International’s Security Lab

Thanks to abc for the proof of concept example.

Download Tool