CVE-2023-42908

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution...

CVE-2023-42903

CVE-2023-42903 is a memory corruption issue in AppleGraphicsControl on macOS Sonoma; fixed in macOS Sonoma 14.2. Processing a malicious file may cause an app to terminate or execute arbitrary code. Exploitation details are not provided in the supplied documents; remediation is to update to macOS ...

CVE-2023-42903

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution...

CVE-2023-42902

Apple macOS Sonoma 14.2 fixes CVE-2023-42902, addressing multiple memory-corruption issues in the AppleGraphicsControl component due to improved input validation. A maliciously crafted file may cause an app to terminate unexpectedly or allow arbitrary code execution. Affected product: macOS Sonom...

CVE-2023-42914

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, watchOS 10.2, macOS Ventura 13.6.3, tvOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, macOS Monterey 12.7.2. An app may be able to break out of its sandbox...

CVE-2023-42914

CVE-2023-42914 is an Apple sandbox-related issue addressed by improved memory handling. Affected platforms include macOS Ventura 13.6.3, macOS Monterey 12.7.2, macOS Sonoma 14.2, iOS 16.7.3 and 17.2 (and iPadOS 16.7.3 and 17.2), watchOS 10.2, and tvOS 17.2. The fixed versions indicate a sandbox e...

PT-2023-28637 · Apple · Macos Sonoma +1

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.2 Description: This issue allows Remote Login sessions to potentially obtain full disk access permissions due to inadequate state management. The estimated number of potentially affected devices worldwide is...

PT-2023-8869

Name of the Vulnerable Software and Affected Versions Safari versions prior to 17.2 iOS versions prior to 17.2 iPadOS versions prior to 17.2 tvOS versions prior to 17.2 watchOS versions prior to 10.2 macOS Sonoma versions prior to 14.2 Description A use after free issue was addressed with improve...

PT-2023-8105 · Apple · Macos Sonoma +1

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.2 Description: The issue is related to a buffer overflow in the AppleGraphicsControl component of the macOS Sonoma operating system. It may allow an attacker to execute arbitrary code using a specially crafte...

PT-2023-8076 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.2 Description: The issue is related to a buffer overflow in the AppleGraphicsControl component of the macOS operating system. It may allow an attacker to execute arbitrary code using a specially crafted file. The...

PT-2023-8685 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.6.4 macOS versions prior to 14.2 Description: An access issue was addressed with additional sandbox restrictions. This issue may allow an app to read arbitrary files. The vulnerability is related to the lack of...

Apple macOS Sonoma Security Vulnerability

Apple macOS Sonoma is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma version 14.2, which arises from the handling of maliciously crafted files that could result in the unexpected termination of an application or arbitrary cod...

PT-2023-28624 · Apple · Macos Sonoma +1

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.2 Description: This issue was addressed with improved state management. Secure text fields may be displayed via the Accessibility Keyboard when using a physical keyboard. Recommendations: For macOS Sonoma...

PT-2023-7961 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.2 macOS Ventura versions prior to 13.6.3 iOS versions prior to 17.2 iOS versions prior to 16.7.3 iPadOS versions prior to 17.2 iPadOS versions prior to 16.7.3 tvOS versions prior to 17.2 Description: The issue is...

PT-2023-8050 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.2 Description: The issue is related to a buffer overflow in the AppleGraphicsControl component of the macOS operating system. It may allow an attacker to execute arbitrary code using a specially crafted file. The...

PT-2023-8347 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.2 Description: The issue is related to a buffer overflow in the AppleVA component of the macOS operating system, which can lead to arbitrary code execution when processing an image. This is due to improper memory...

PT-2023-8077 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.2 Description: The issue is related to multiple memory corruption problems that have been addressed with improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or...

PT-2023-28629 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.7.2 macOS versions prior to 13.6.3 macOS versions prior to 14.2 Description: A use-after-free issue was addressed with improved memory management. This issue allows a local attacker to potentially elevate their...

PT-2023-7960 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.2 macOS Ventura versions prior to 13.6.3 macOS Monterey versions prior to 12.7.2 Description: The issue is related to insufficient protection of registration data in the AppleEvents component of macOS, which may all...

ManageEngine SupportCenter Plus < 14.2 Build 14200

The version of ManageEngine SupportCenter Plus installed on the remote host is prior to 14.2 Build 14200. It is, therefore, affected by a vulnerability as referenced in the support-centerCVE-2023-38331 advisory. - Zoho ManageEngine Support Center Plus 14001 and below is vulnerable to stored XSS i...