Macos@14.0 Security Vulnerabilities and Issues — Macos@14.0 CVE List

Lucene search

AppleMacos14.0

30 matches found

CVE•added 2024/02/21 7:15 a.m.•6978 views

CVE-2023-42853

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to access user-sensitive data.

5.5CVSS6.6AI score0.00038EPSS

CVE•added 2024/02/21 7:15 a.m.•6943 views

CVE-2023-42836

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.3, macOS Sonoma 14.1, macOS Monterey 12.7.2. An attacker may be able to access connected network volumes mounted in the home directory.

5.3CVSS5.2AI score0.00205EPSS

CVE•added 2024/02/21 7:15 a.m.•6891 views

CVE-2023-42952

The issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.3, macOS Sonoma 14.1, macOS Monterey 12.7.1. An app with root privileges may be able to access private information.

4.4CVSS6.7AI score0.00025EPSS

CVE•added 2024/02/21 7:15 a.m.•6707 views

CVE-2023-42889

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to bypass certain Privacy preferences.

5.5CVSS6.7AI score0.00055EPSS

CVE•added 2024/02/21 7:15 a.m.•6603 views

CVE-2023-42839

This issue was addressed with improved state management. This issue is fixed in tvOS 17.1, watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.

6.2CVSS7AI score0.00051EPSS

CVE•added 2024/02/21 7:15 a.m.•6598 views

CVE-2023-42878

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.

5.5CVSS7AI score0.00053EPSS

CVE•added 2024/02/21 7:15 a.m.•6215 views

CVE-2023-42953

A permissions issue was addressed with additional restrictions. This issue is fixed in tvOS 17.1, watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.

5.5CVSS7.2AI score0.00042EPSS

CVE•added 2024/02/21 7:15 a.m.•6213 views

CVE-2023-42843

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, Safari 17.1, macOS Sonoma 14.1. Visiting a malicious website may lead to address bar spoofing.

7.5CVSS5.2AI score0.00071EPSS

CVE•added 2024/02/21 7:15 a.m.•6204 views

CVE-2023-42946

This issue was addressed with improved redaction of sensitive information. This issue is fixed in tvOS 17.1, watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to leak sensitive user information.

7.5CVSS7.1AI score0.00144EPSS

CVE•added 2024/02/21 7:15 a.m.•6172 views

CVE-2023-42834

A privacy issue was addressed with improved handling of files. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.

6.2CVSS7AI score0.0006EPSS

CVE•added 2024/02/21 7:15 a.m.•6149 views

CVE-2023-42823

The issue was resolved by sanitizing logging This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1. An app may be able to access user-sensitive data.

5.5CVSS7.1AI score0.00046EPSS

CVE•added 2024/02/21 7:15 a.m.•4526 views

CVE-2023-42873

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14.1, tvOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1. An app may be able to execute arbitrary code with kernel privileges.

7.8CVSS7.5AI score0.00077EPSS

CVE•added 2024/02/21 7:15 a.m.•4514 views

CVE-2023-42860

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to modify protected parts of the file system.

7.7CVSS6.7AI score0.00574EPSS

CVE•added 2024/02/21 7:15 a.m.•4486 views

CVE-2023-42942

This issue was addressed with improved handling of symlinks. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1. A malicious app may be able to gain root privileges.

7.8CVSS7AI score0.00126EPSS

CVE•added 2024/02/21 7:15 a.m.•4469 views

CVE-2023-42848

The issue was addressed with improved bounds checks. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1. Processing a maliciously crafted image may lead to heap corruption.

7.8CVSS6.9AI score0.00043EPSS

CVE•added 2024/02/21 7:15 a.m.•4356 views

CVE-2023-42945

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1. An app may gain unauthorized access to Bluetooth.

9.1CVSS7.5AI score0.00057EPSS

CVE•added 2024/02/21 7:15 a.m.•4081 views

CVE-2023-42838

An access issue was addressed with improvements to the sandbox. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.1, macOS Monterey 12.7.2. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.

8.6CVSS8.2AI score0.00035EPSS

CVE•added 2024/02/21 7:15 a.m.•3850 views

CVE-2023-42877

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to modify protected parts of the file system.

7.7CVSS6.6AI score0.00034EPSS

CVE•added 2024/02/21 7:15 a.m.•3077 views

CVE-2023-42840

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to access user-sensitive data.

5.5CVSS6.6AI score0.00039EPSS

CVE•added 2024/02/21 7:15 a.m.•2849 views

CVE-2023-42858

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to access user-sensitive data.

5.5CVSS6.6AI score0.00048EPSS

CVE•added 2024/02/21 7:15 a.m.•1155 views

CVE-2023-42859

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to modify protected parts of the file system.

7.7CVSS6.6AI score0.00031EPSS

CVE•added 2023/09/02 8:15 p.m.•407 views

CVE-2023-4738

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.

7.8CVSS7.7AI score0.00041EPSS

CVE•added 2023/10/25 7:15 p.m.•314 views

CVE-2023-40408

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. Hide My Email may be deactivated unexpectedly.

5.3CVSS4.7AI score0.00194EPSS

CVE•added 2023/10/25 7:15 p.m.•247 views

CVE-2023-40404

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sonoma 14.1. An app may be able to execute arbitrary code with kernel privileges.

7.8CVSS7.6AI score0.00871EPSS

CVE•added 2023/10/25 7:15 p.m.•241 views

CVE-2023-40405

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.1. An app may be able to read sensitive location information.

3.3CVSS3.8AI score0.00047EPSS

CVE•added 2023/07/17 9:15 p.m.•173 views

CVE-2023-38403

iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.

7.5CVSS7.6AI score0.01253EPSS

CVE•added 2023/09/03 7:15 p.m.•100 views

CVE-2023-4751

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.

7.8CVSS7.7AI score0.00045EPSS

CVE•added 2023/09/02 7:15 p.m.•78 views

CVE-2023-4736

Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833.

7.8CVSS7.7AI score0.0003EPSS

CVE•added 2024/03/08 2:15 a.m.•57 views

CVE-2023-28826

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.1, macOS Ventura 13.6.5. An app may be able to access sensitive user data.

5.5CVSS6.3AI score0.00018EPSS

CVE•added 2025/04/11 3:15 p.m.•41 views

CVE-2023-42981

Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS 14. The issue was addressed with improved checks.

5.4CVSS6.1AI score0.00088EPSS