WebKit structured-clone UAF CVE-2023-28205
iOS fixed in 16.4.1. Your build is vulnerable if this crashes WebContent.
- Tap Start. The page loops
history.pushState with cyclic Map/Set graphs.
- Expected when vulnerable: tab reloads, freezes, or Safari dismisses — heartbeat stops.
- Confirmation: this page auto-reports liveness; the lab console shows the session going dark.