2454 matches found
Design/Logic Flaw
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, macOS Monterey 12.6.3. An encrypted volume may be unmounted and remounted by a different user without prompting for the password...
Race condition
A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. An app may be able to modify protected parts of the file system...
Default credentials
The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2. An app may be able to execute arbitrary code with kernel privileges...
CVE-2023-23507
The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2. An app may be able to execute arbitrary code with kernel privileges...
CVE-2022-32900
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6, macOS Big Sur 11.7. An app may be able to gain elevated privileges...
CVE-2020-9846
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to access local users' Apple IDs...
CVE-2023-23493
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, macOS Monterey 12.6.3. An encrypted volume may be unmounted and remounted by a different user without prompting for the password...
CVE-2022-32896
This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.6, macOS Big Sur 11.7. A user may be able to view sensitive user information...
CVE-2023-23504
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, iOS 15.7.3 and iPadOS 15.7.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code with kernel privileges...
CVE-2020-9846
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to access local users' Apple IDs...
CVE-2022-46713
A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. An app may be able to modify protected parts of the file system...
CVE-2023-23514
CVE-2023-23514 is a macOS kernel-use-after-free vulnerability. In macOS Ventura 13.3 (and related updates) the issue was addressed by improved memory management, fixing a flaw that could allow an app to execute arbitrary code with kernel privileges. Public references in Apple advisories show the ...
CVE-2023-23493
CVE-2023-23493 is a logic issue in macOS DiskArbitration where an encrypted volume could be unmounted and remounted by a different user without prompting for the password. Apple attributes the fix to macOS Monterey 12.6.3 and macOS Ventura 13.2. Affected component: DiskArbitration (macOS). Impact...
CVE-2023-23497
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2, macOS Monterey 12.6.3. An app may be able to gain root privileges...
CVE-2022-46713
A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. An app may be able to modify protected parts of the file system...
CVE-2022-46713
CVE-2022-46713 : A race condition was addressed with additional validation. Public details show the issue is fixed in macOS Ventura 13, macOS Monterey 12.6.1, and macOS Big Sur 11.7.1. The vulnerability could allow an app to modify protected parts of the file system. The available sources attribu...
CVE-2023-23504
CVE-2023-23504 is an Apple vulnerability where a memory-handling issue could allow an app to execute arbitrary code with kernel privileges. The fixed versions include macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, iOS 15.7.3, iPadOS 15.7.3, tvOS 16.3, iOS 16.3, and iPadOS 16.3. Sources c...
CVE-2023-23504
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, iOS 15.7.3 and iPadOS 15.7.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code with kernel privileges...
CVE-2023-23493
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, macOS Monterey 12.6.3. An encrypted volume may be unmounted and remounted by a different user without prompting for the password...
CVE-2022-46704
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.1, macOS Big Sur 11.7.2, macOS Monterey 12.6.2. An app may be able to modify protected parts of the file system...