CVE-2023-23516

CVE-2023-23516 affects macOS kernel through a memory handling issue that could allow an app to execute arbitrary code with kernel privileges. The vulnerability is fixed by Apple in macOS Big Sur 11.7.3, macOS Monterey 12.6.3, and macOS Ventura 13.2, per NVD, RH Red Hat advisories, and Apple secur...

CVE-2022-42834

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13, macOS Big Sur 11.7.3. An app may be able to access mail folder attachments through a temporary directory used during compression...

CVE-2023-32411

This issue was addressed with improved entitlements. This issue is fixed in tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to bypass Privacy preferences...

CVE-2023-32386

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to observe unprotected user data...

CVE-2023-32386

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to observe unprotected user data...

CVE-2023-32382

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. Processing a 3D model may result in disclosure of process memory...

CVE-2023-32407

CVE-2023-32407 describes a logic issue in Apple platforms that could allow an app to bypass Privacy preferences. Affected components are not explicitly enumerated in the provided documents, but constants indicate multiple Apple OSes are impacted (watchOS, tvOS, macOS, iOS, iPadOS) with versions l...

CVE-2023-32413

CVE-2023-32413 describes a race condition (TOCTOU) in Apple XNU logic that may allow an app to gain root privileges. Public details in the primary CVE entry state a fix in multiple Apple OS releases: watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6/iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS...

CVE-2022-46718

CVE-2022-46718 is a logic issue in Apple platforms that could allow an app to read sensitive location information. The issue is addressed with improved restrictions and is fixed in iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, and macOS Monterey 12.6.2. Affected products...

CVE-2023-32411

The CVE-2023-32411 issue concerns bypassing Privacy preferences via entitlements, addressed by Apple through updated entitlements. The vulnerability is fixed in tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5, and iPadOS 16.5. Affected context: local exploit p...

CVE-2023-32369

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to modify protected parts of the file system...

CVE-2022-46718

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, macOS Monterey 12.6.2. An app may be able to read sensitive location information...

CVE-2023-32403

This issue was addressed with improved redaction of sensitive information. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to read sensitive location...

CVE-2022-42860

This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Monterey 12.6.1, macOS Big Sur 11.7.1, macOS Ventura 13. An app may be able to modify protected parts of the file system...

CVE-2023-32412

CVE-2023-32412 involves a use-after-free in a component likely within Apple platform software. Affected: watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 15.7.6/iPadOS 15.7.6 and iOS 16.5/iPadOS 16.5. Root cause: use-after-free memory issue addressed by...

部分Apple产品 安全漏洞

Apple macOS Big Sur and others are products of Apple Inc. in the U.S. Apple macOS Big Sur is the 17th major version of Apple's macOS for the MAC operating system. apple macOS Monterey is the 18th major version of macOS for the McIntosh desktop operating system. Apple macOS Ventura is a desktop...

CVE-2023-32405

A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to gain root privileges...

CVE-2023-32355

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to modify protected parts of the file system...

CVE-2023-32382

CVE-2023-32382 is an out-of-bounds read in Apple’s Model I/O when processing a 3D model, potentially disclosing process memory. Affected on macOS Big Sur 11.7.7, macOS Monterey 12.6.6, and macOS Ventura 13.4. Remediation: apply the corresponding macOS updates (Big Sur 11.7.7 / Monterey 12.6.6 / V...

CVE-2023-32369

CVE-2023-32369 is a macOS SIP bypass triggered by environment-variable poisoning (PERL5OPT and BASH_ENV) that can enable arbitrary action by tampering with system processes during Migration Assistant flow. Microsoft’s writeups detail how systemmigrationd and related components can be coerced to r...