Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, seine Privilegien erweitern, beliebigen Programmcode auszuführen, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.
Product
Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.
Vulnerabilities 36
-
Critical 9.8
When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data …
-
Critical 9.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS…
-
High 8.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2…
-
High 8.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2…
-
High 8.6
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 1…
-
High 8.6CVE-2023-23531 Public exploit
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 1…
-
High 8.1
curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL, it se…
-
High 7.8
A type confusion issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able …
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2…
-
High 7.8
The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2. …
-
High 7.5
In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, cur…
-
High 7.5
A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 9.3, tvOS 16.3, …
-
Medium 5.9
A race condition was addressed with additional validation. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura…
-
Medium 5.5
A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.2. An app may be ab…
-
Medium 5.5
The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2,…
-
Medium 5.5
A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.2. An app may be ab…
-
Medium 5.0
vim autocmd quickfix.c qf_update_buffer use after free
A vulnerability was found in vim and classified as problematic. Affected by this issue is the function qf_update_buffer of the file quickfix.c of the component autocmd Handler. The manipulation leads to use after free. The attack may be launched remotely. Upg…
-
Low 3.7
When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when …
-
Low 3.3
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Monter…
-
Unscored —
curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white s…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, macOS Monterey 1…
-
Unscored —
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.2, watchOS 9.3, iOS 15.7.2 and iP…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura …
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in iOS 15.7.3 and iPadOS 15.7.3, macOS …
-
Unscored —
This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 1…
-
Unscored —
The issue was addressed with improved memory handling This issue is fixed in macOS Ventura 13.2. An app may be able to …
-
Unscored —
An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPa…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2…
-
Unscored —
The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura …
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2,…
-
Unscored —
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2. Mountin…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPa…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.…
-
Unscored —
This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in tvOS 16.3, macOS …
Revision history
-
#4
CVE's ergänzt
-
#3
CVE's ergänzt
-
#2
CVE-2023-23520, CVE-2023-23530, CVE-2023-23531 ergänzt
-
#1
Initiale Fassung
References
-
Apple Security Advisory HT213603 vom 2023-01-23
https://support.apple.com/en-us/HT213603
-
Apple Security Advisory HT213604 vom 2023-01-23
https://support.apple.com/en-us/HT213604
-
Apple Security Advisory HT213605 vom 2023-01-23
https://support.apple.com/en-us/HT213605