Lucene search
HistoryJun 23, 2023 - 6:15 p.m.
CVE-2023-23516
macos
memory handling
arbitrary code
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
27.8%
The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2, macOS Monterey 12.6.3. An app may be able to execute arbitrary code with kernel privileges.
Affected configurations
Node
applemacosRange11.0.0–11.7.3
ORapplemacosRange12.0.0–12.6.3
ORapplemacosRange13.0–13.2
Related
cvelist
cvelist
CVE-2023-23516
2023-06-23 00:00:00
prion
prion
Design/Logic Flaw
2023-06-23 18:15:00
cve
cve
CVE-2023-23516
2023-06-23 18:15:10
apple
apple
About the security content of macOS Big Sur 11.7.3
2023-01-23 00:00:00
About the security content of macOS Monterey 12.6.3
2023-01-23 00:00:00
About the security content of macOS Ventura 13.2
2023-01-23 00:00:00
nessus
nessus
macOS 11.x < 11.7.3 Multiple Vulnerabilities (HT213603)
2023-01-24 00:00:00
macOS 12.x < 12.6.3 Multiple Vulnerabilities (HT213604)
2023-01-23 00:00:00
openvas
openvas
Apple Mac OS X Security Update (HT213605)
2023-01-25 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
27.8%
Related for NVD:CVE-2023-23516