Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, beliebigen Programmcode auszuführen, Informationen offenzulegen, seine Privilegien zu erweitern, Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen, Sicherheitsvorkehrungen zu umgehen oder sonstige Auswirkungen zu verursachen.
Product
Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.
Vulnerabilities 99
-
High 8.8
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safa…
KEV Jun 23, 2023 -
Critical 9.8
This was addressed with additional checks by Gatekeeper on files downloaded from an iCloud shared-by-me folder. This is…
-
Critical 9.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4…
-
Critical 9.8
This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16…
-
Critical 9.1
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4…
-
High 8.8
This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS…
-
High 8.8
A memory initialization issue was addressed. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. A remote…
-
High 8.8
The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, …
-
High 8.8
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.4, macOS Big Sur 11.7.5, macO…
-
High 8.6
This issue was addressed with a new entitlement. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macO…
-
High 7.8
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.
-
High 7.8
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, macOS …
-
High 7.8
This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, mac…
-
High 7.8
The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, macOS Monte…
-
High 7.8
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, i…
-
High 7.8
An integer overflow was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 a…
-
High 7.8
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.3, iOS 15.7.…
-
High 7.8
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, macOS Mo…
-
High 7.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. Process…
-
High 7.8
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Stud…
-
High 7.8
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, iOS 16…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 1…
-
High 7.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app …
-
High 7.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app …
-
High 7.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app …
-
High 7.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app …
-
High 7.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app …
-
High 7.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app …
-
High 7.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app …
-
High 7.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app …
-
High 7.8
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.7.5,…
-
High 7.8
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, macOS …
-
High 7.8
A type confusion issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7.5, macOS Ventura 1…
-
High 7.5CVE-2022-43551 EPSS 17%
A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS…
-
High 7.5
The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPa…
-
High 7.3
Out-of-bounds Read in vim/vim
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
-
High 7.3
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
-
High 7.3
Out-of-bounds Write in vim/vim
Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
-
High 7.3
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
-
High 7.3
Divide By Zero in vim/vim
Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.
-
High 7.1
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app …
-
High 7.1
The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3. An app may be able to c…
-
Medium 6.7
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 1…
-
Medium 6.5
The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.…
-
Medium 6.5
A denial-of-service issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. A use…
-
Medium 6.5
The issue was addressed with improved authentication. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16…
-
Medium 6.5
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.…
-
Medium 6.5
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.…
-
Medium 6.3
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may be able to break ou…
-
Medium 5.9
A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it support…
-
Medium 5.5
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macO…
-
Medium 5.5
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. An …
-
Medium 5.5
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Big Sur 11.7.5. Processi…
-
Medium 5.5
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 1…
-
Medium 5.5
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventur…
-
Medium 5.5
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. An …
-
Medium 5.5
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventur…
-
Medium 5.5
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.…
-
Medium 5.5
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.…
-
Medium 5.5
This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16…
-
Medium 5.5
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 15.7.…
-
Medium 5.5
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macO…
-
Medium 5.5
This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. Fil…
-
Medium 5.5
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS B…
-
Medium 5.5
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macO…
-
Medium 5.5
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 1…
-
Medium 5.5
Multiple validation issues were addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, …
-
Medium 5.5
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, mac…
-
Medium 5.5
A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16…
-
Medium 5.5
An integer overflow was addressed through improved input validation. This issue is fixed in tvOS 16.4, macOS Big Sur 11…
-
Medium 5.5
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS B…
-
Medium 5.5
A privacy issue was addressed by moving sensitive data to a more secure location. This issue is fixed in macOS Ventura …
-
Medium 5.5
A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, macOS Monterey 1…
-
Medium 5.5
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 15.7.…
-
Medium 5.5
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may bypass Gatekeep…
-
Low 3.6
The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS V…
-
Low 3.3
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS …
-
Low 3.3
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventur…
-
Low 3.3
A path handling issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3. An app may be …
-
Low 3.3
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventur…
-
Low 2.4
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 16.4 and iPadOS …
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 8.6, tvOS 15.5, iO…
-
Unscored —
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue i…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processi…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processi…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processi…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processi…
-
Unscored —
A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.3. An app may bypass Gate…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. Processing a maliciou…
-
Unscored —
This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3. A user may be able …
-
Unscored —
A denial-of-service issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. A re…
-
Unscored —
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventur…
-
Unscored —
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, …
-
Unscored —
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input…
-
Unscored —
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventu…
-
Unscored —
Error handling was changed to not reveal sensitive information. This issue is fixed in macOS Ventura 13.3. A website ma…
-
Unscored —
A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3. Content Security Polic…
-
Unscored —
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may be able to gain…
Revision history
-
#9
CVE's ergänzt
-
#8
CVE-2023-28188, CVE-2023-28195, CVE-2023-28187, CVE-2023-27950 ergänzt
-
#7
CVE's ergänzt
-
#6
CVE Nummern ergänzt
-
#5
CVE's ergänzt
-
#4
CVE-2023-23536, CVE-2023-32435 ergänzt
-
#3
CVE-2023-27966 ergänzt
-
#2
CVE's ergänzt
-
#1
Initiale Fassung
References
-
Apple Security Advisory vom 2023-03-27
https://support.apple.com/en-us/HT213670
-
Apple Security Advisory vom 2023-03-27
https://support.apple.com/en-us/HT213675
-
Apple Security Advisory vom 2023-03-27
https://support.apple.com/en-us/HT213677