CVE-2023-32369

CVE-2023-32369 is a macOS SIP bypass triggered by environment-variable poisoning (PERL5OPT and BASH_ENV) that can enable arbitrary action by tampering with system processes during Migration Assistant flow. Microsoft’s writeups detail how systemmigrationd and related components can be coerced to r...

CVE-2023-32412

CVE-2023-32412 involves a use-after-free in a component likely within Apple platform software. Affected: watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 15.7.6/iPadOS 15.7.6 and iOS 16.5/iPadOS 16.5. Root cause: use-after-free memory issue addressed by...

CVE-2022-42860

This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Monterey 12.6.1, macOS Big Sur 11.7.1, macOS Ventura 13. An app may be able to modify protected parts of the file system...

部分Apple产品 安全漏洞

Apple macOS Big Sur and others are products of Apple Inc. in the U.S. Apple macOS Big Sur is the 17th major version of Apple's macOS for the MAC operating system. apple macOS Monterey is the 18th major version of macOS for the McIntosh desktop operating system. Apple macOS Ventura is a desktop...

CVE-2022-46718

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, macOS Monterey 12.6.2. An app may be able to read sensitive location information...

CVE-2023-27940

The issue was addressed with additional permissions checks. This issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, macOS Monterey 12.6.6, macOS Ventura 13.4. A sandboxed app may be able to observe system-wide network connections...

CVE-2023-32382

CVE-2023-32382 is an out-of-bounds read in Apple’s Model I/O when processing a 3D model, potentially disclosing process memory. Affected on macOS Big Sur 11.7.7, macOS Monterey 12.6.6, and macOS Ventura 13.4. Remediation: apply the corresponding macOS updates (Big Sur 11.7.7 / Monterey 12.6.6 / V...

CVE-2023-32408

CVE-2023-32408 is an Apple vulnerability where an app may read sensitive location information due to improved handling of caches. Affected: watchOS 9.5; tvOS 16.5; macOS Ventura 13.4; macOS Monterey 12.6.6; iOS 15.7.6 and 16.5; iPadOS 15.7.6 and 16.5. Root cause: improper cache handling leading t...

CVE-2023-32360

CVE-2023-32360 affects the CUPS printing system. The issue is an authentication/state-management weakness that could allow an unauthenticated local user to access recently printed documents. Patches/mitigations are referenced across multiple advisories (e.g., macOS updates fixing the issue; vario...

About the security content of macOS Monterey 12.6.7

About the security content of macOS Monterey 12.6.7 This document describes the security content of macOS Monterey 12.6.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

About the security content of Safari 16.5.1

About the security content of Safari 16.5.1 This document describes the security content of Safari 16.5.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

PT-2023-3221

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 9.5.2 watchOS versions prior to 8.8.1 macOS Big Sur versions prior to 11.7.8 macOS Monterey versions prior to 12.6.7 macOS Ventura versions prior to 13.4.1 iOS versions prior to 15.7.7 iOS versions prior to 16.5.1...

About the security content of Xcode 14.0

About the security content of Xcode 14.0 This document describes the security content of Xcode 14.0. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

PT-2023-2897 · Apple · Macos Monterey +3

Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions 11.7.7 and earlier macOS Monterey versions 12.6.6 and earlier macOS Ventura versions 13.4 and earlier Description: A use-after-free issue was addressed with improved memory management. This issue may allow a remote...

PT-2023-2891 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Big Sur 11.7.7 macOS versions prior to Monterey 12.6.6 macOS versions prior to Ventura 13.4 Description: The issue is related to an out-of-bounds read in the IOSurface component of MacOS, which may allow an attacker to...

PT-2023-8487 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.7.7 macOS versions prior to 12.6.6 macOS versions prior to 13.4 Description: A buffer overflow issue was addressed with improved bounds checking. This issue may lead to an unexpected app termination or arbitrary cod...

PT-2023-23745 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.7.7 macOS versions prior to 12.6.6 macOS versions prior to 13.4 Description: A logic issue was addressed with improved state management, which may allow an app to modify protected parts of the file system...

PT-2023-2902 · Apple · Macos Monterey +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.7.6 iPadOS versions prior to 15.7.6 macOS Monterey versions prior to 12.6.6 macOS Ventura versions prior to 13.4 Description: The issue allows a sandboxed app to observe system-wide network connections due to inadequa...

PT-2023-2895 · Apple · Ipados +7

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 macOS Big Sur versions prior to 11.7.7 macOS Monterey versions prior to 12.6.6 iOS versions prior to 15.7.6 and prior to 16.5 iPadOS versions prior...

PT-2023-4704 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 macOS Big Sur versions prior to 11.7.7 macOS Monterey versions prior to 12.6.6 iOS versions prior to 15.7.6 and prior to 16.5 iPadOS versions prior...