CVE-2022-46704

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.1, macOS Big Sur 11.7.2, macOS Monterey 12.6.2. An app may be able to modify protected parts of the file system...

CVE-2023-23497

CVE-2023-23497 is a logic issue in macOS state management that could allow an app to gain root privileges. It affects macOS Big Sur 11.7.3, macOS Monterey 12.6.3, and macOS Ventura 13.2, with fixes implemented in those versions. No exploit details are provided in the supplied documents.

CVE-2023-23504

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, iOS 15.7.3 and iPadOS 15.7.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-46723

This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.1, macOS Big Sur 11.7.1. A remote user may be able to write arbitrary files...

CVE-2022-32902

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6, macOS Big Sur 11.7. An app may be able to bypass Privacy preferences...

CVE-2023-23508

The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2, macOS Monterey 12.6.3. An app may be able to bypass Privacy preferences...

CVE-2023-23505

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, iOS 15.7.3 and iPadOS 15.7.3, iOS 16.3 and iPadOS 16.3. An app may be able to access information about a user’s...

CVE-2023-23518

WebKitGTK (WebKit2GTK) has a confirmed memory corruption flaw tracked as CVE-2023-23518 that could lead to arbitrary code execution when processing malicious web content. The issue is fixed in Safari 16.3 and in WebKitGTK updates around version 2.38.x (e.g., WebKitGTK 2.38.5 per ALAS2-2023-2088; ...

CVE-2022-46704

CVE-2022-46704 is an Apple macOS vulnerability describing a logic issue in state management that could allow an app to modify protected parts of the file system. The issue is fixed in macOS Ventura 13.1, macOS Big Sur 11.7.2, and macOS Monterey 12.6.2. The NVD entry lists a local attack vector, l...

CVE-2023-23514

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, macOS Big Sur 11.7.5. An app may be able to execute arbitrary code with kernel privileges...

CVE-2023-23513

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2, macOS Monterey 12.6.3. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution...

CVE-2022-22582

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5, macOS Monterey 12.3. A local user may be able to write arbitrary files...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Monterey versions prior to 12.0.1, which stems from faulty code logic. The vulnerability can be exploited by an attacker to access a local user's Apple ID...

CVE-2023-23502

An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3, tvOS 16.3, watchOS 9.3. An app may be able to determine kernel memory layout...

CVE-2022-46704

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.1, macOS Big Sur 11.7.2, macOS Monterey 12.6.2. An app may be able to modify protected parts of the file system...

CVE-2022-22668

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. A malicious application may be able to leak sensitive user information...

CVE-2022-46723

CVE-2022-46723 affects macOS Big Sur 11.x and related macOS releases; a remote attacker could write arbitrary files. Apple fixes are in macOS Big Sur 11.7.1 and macOS Monterey 12.6.1. Remediation: update to these versions or later per Apple advisories HT213493/HT213494.

CVE-2022-32900

CVE-2022-32900 is a logic issue in macOS state management that may let an app gain elevated privileges. It is fixed in macOS Monterey 12.6 and macOS Big Sur 11.7. Patches are delivered via Apple security updates HT213443/HT213444 (update recommendations and release notes). The connected sources c...

CVE-2023-23518

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, macOS Big Sur 11.7.3, Safari 16.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2020-9846

CVE-2020-9846 affects Apple macOS Monterey prior to 12.0.1. Description shows a logic/state-management issue that could allow a malicious application to access local users’ Apple IDs. Apple released a fix in macOS Monterey 12.0.1 (per the initial doc). Remediation: update to macOS Monterey 12.0.1...