CVE-2023-27944

CVE-2023-27944 affects macOS sandboxing: the issue is that an app may break out of its sandbox. It is fixed via updates in macOS Ventura 13.3, Monterey 12.6.4, and Big Sur 11.7.5 (entitlements updated). The CVSS v3.1 metrics provided indicate a local, low-attack-complexity path with no privileges...

CVE-2023-23534

CVE-2023-23534 affects macOS Big Sur 11.7.5 and macOS Ventura 13.3. Root cause stated in Apple advisories is within the Carbon Core area, where processing a maliciously crafted image may cause disclosure of process memory. The issue is fixed in the listed OS updates (Big Sur 11.7.5 and Ventura 13...

CVE-2023-23525

CVE-2023-23525 is an Apple vulnerability describing a local privilege-escalation where an app may gain root privileges. Public records indicate fixes in macOS Ventura 13.3, iOS 16.4, iPadOS 16.4, and macOS Big Sur 11.7.5. The provided documents list these OS versions as the affected and patched t...

CVE-2023-27951

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An archive may be able to bypass Gatekeeper...

CVE-2023-27942

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to access user-sensitive data...

CVE-2023-27935

The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A remote user may be able to cause unexpected app termination or arbitrary code execution...

CVE-2023-27941

CVE-2023-27941 describes a validation issue addressed by improved input sanitization, with a fix released across multiple Apple platforms: macOS Big Sur 11.7.5, macOS Monterey 12.6.4, macOS Ventura 13.3, iOS 15.7.4, and iPadOS 15.7.4. The issue could allow an app to disclose kernel memory. The pr...

CVE-2023-27961

Multiple validation issues were addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, watchOS 9.4, macOS Big Sur 11.7.5. Importing a maliciously crafted calendar invitation may exfiltra...

CVE-2023-27928

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4, macOS Big Sur 11.7.5. An app may be able to access information about a user’s contacts...

CVE-2023-23537

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, watchOS 9.4, macOS Big Sur 11.7.5. An app may be able to read sensitive location information...

CVE-2023-27958

CVE-2023-27958 concerns macOS kernel memory handling. The issue could allow a remote attacker to cause an unexpected system termination or corrupt kernel memory. Apple’s advisories and multiple sources confirm the vulnerability impacts macOS Big Sur (11.7.5), Monterey (12.6.4), and Ventura (13.3)...

CVE-2023-28192

CVE-2023-28192 is a local-permission issue in macOS prior to the patch. An app may read sensitive location information due to insufficient validation; it is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, and macOS Big Sur 11.7.5. The CVSS details indicate LOCAL attack vector, LOW attack comp...

CVE-2023-23542

CVE-2023-23542 concerns a privacy issue where private data redaction in log entries was improved and is fixed in macOS updates. Affected platforms cited in sources include macOS Big Sur 11.7.5, Monterey 12.6.4, and Ventura 13.3. The core issue is that an app may access user-sensitive data via log...

CVE-2023-23542

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to access user-sensitive data...

CVE-2023-27951

CVE-2023-27951 affects macOS — specifically Archive Utility bypassing Gatekeeper. Documents show the issue is resolved by Apple in macOS Ventura 13.3, macOS Monterey 12.6.4, and macOS Big Sur 11.7.5 with improved checks. Connected sources corroborate Gatekeeper bypass risk and list the fixed rele...

CVE-2023-28192

A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to read sensitive location information...

CVE-2023-23525

This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5. An app may be able to gain root privileges...

CVE-2023-28189

CVE-2023-28189 affects macOS: Big Sur 11.7.5, Monterey 12.6.4, and Ventura 13.3 (and presumably earlier builds) with an information disclosure issue where an app may view sensitive data. The entry states the vulnerability was addressed by improved checks and is fixed in the listed macOS releases....

CVE-2023-27953

CVE-2023-27953 is an Apple macOS vulnerability addressed by memory-management fixes. The issue allows a remote attacker to cause an unexpected system termination or corrupt kernel memory. Affected products/versions per sources: macOS Big Sur 11.7.5, macOS Monterey 12.6.4, and macOS Ventura 13.3. ...

CVE-2023-27944

This issue was addressed with a new entitlement. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to break out of its sandbox...