High 3 exploited CVEs WID-SEC-2023-1880 53 CVEs

Apple macOS: Mehrere Schwachstellen

Published Jul 24, 2023 · Updated Sep 11, 2023 · Revision 5 · de-DE

Vendor: Apple Product: macOS Product: macOS Big Sur < 11.7.9 Product: macOS Monterey < 12.6.8 Product: macOS Ventura < 13.5 Platform: macOS

Summary

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen und seine Privilegien zu erweitern.

Product

Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.

Vulnerabilities 53

High 8.8

CVE-2023-37450 Exploited EPSS 19%

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 26, 2023
KEV Jul 13, 2023
High 7.8

CVE-2023-41990 Exploited

The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, m…

Apple macOS iOS and iPadOS watchOS macOS iOS

Sep 11, 2023
KEV Jan 8, 2024
Medium 5.5

CVE-2023-38606 Exploited

This issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and i…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jul 26, 2023
KEV Jul 26, 2023
High 8.8

CVE-2023-38600 Public exploit

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 27, 2023
High 7.5

CVE-2023-28319

A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH server's pub…

mysql curl curl rust Debian Azure Linux Alpine

May 26, 2023
High 7.5

CVE-2023-2953

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() functio…

openldap openldap openldap Debian Ubuntu Azure Linux

May 30, 2023
High 7.5

CVE-2023-40440

This issue was addressed with improved state management of S/MIME encrypted emails. This issue is fixed in macOS Monter…

Apple macOS macOS

Sep 11, 2023
Medium 5.9

CVE-2023-28320

A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for res…

mysql curl curl rust Debian Azure Linux Alpine

May 26, 2023
Medium 5.9

CVE-2023-28321

An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard pat…

mysql curl curl curl Debian Ubuntu Azure Linux Alpine

May 26, 2023
Medium 5.3

CVE-2023-28322

An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously …

curl curl curl tensorflow Debian Ubuntu Azure Linux Alpine

May 26, 2023
Unscored —

CVE-2023-32364 Public exploit

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.5. A sandboxed process …

Apple macOS macOS

Jul 27, 2023
Unscored —

CVE-2023-32381

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.6.8, iOS…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jul 26, 2023
Unscored —

CVE-2023-32416

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iP…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jul 27, 2023
Unscored —

CVE-2023-32418

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS B…

Apple macOS macOS

Jul 27, 2023
Unscored —

CVE-2023-32429

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. An app may be able to bypass P…

Apple macOS macOS

Jul 27, 2023
Unscored —

CVE-2023-32433

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.6.8, iOS…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jul 26, 2023
Unscored —

CVE-2023-32441

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPa…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jul 27, 2023
Unscored —

CVE-2023-32442

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Ventura 13.5, macOS Monte…

Apple macOS macOS

Jul 27, 2023
Unscored —

CVE-2023-32443

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.8, macOS…

Apple macOS macOS

Jul 27, 2023
Unscored —

CVE-2023-32444

A logic issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.…

Apple macOS macOS

Jul 28, 2023
Unscored —

CVE-2023-32654

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.5. A user may be ab…

Apple macOS macOS

Jul 28, 2023
Unscored —

CVE-2023-32734

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macO…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jul 27, 2023
Unscored —

CVE-2023-35983

This issue was addressed with improved data protection. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.…

Apple macOS macOS

Jul 26, 2023
Unscored —

CVE-2023-35993

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.6.8, iOS…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jul 27, 2023
Unscored —

CVE-2023-36854

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS B…

Apple macOS macOS

Jul 26, 2023
Unscored —

CVE-2023-36862

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This iss…

Apple macOS macOS

Jul 26, 2023
Unscored —

CVE-2023-38133

The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 26, 2023
Unscored —

CVE-2023-38258

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5, macOS Monterey 12.6.8. Process…

Apple macOS macOS

Jul 27, 2023
Unscored —

CVE-2023-38259

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.…

Apple macOS macOS

Jul 27, 2023
Unscored —

CVE-2023-38261

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 1…

Apple macOS iOS and iPadOS macOS iOS

Jul 27, 2023
Unscored —

CVE-2023-38410

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A us…

Apple macOS iOS and iPadOS macOS iOS

Jul 26, 2023
Unscored —

CVE-2023-38421

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5, macOS Monterey 12.6.8. Process…

Apple macOS macOS

Jul 27, 2023
Unscored —

CVE-2023-38424

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 1…

Apple macOS iOS and iPadOS macOS iOS

Jul 27, 2023
Unscored —

CVE-2023-38425

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 1…

Apple macOS iOS and iPadOS macOS iOS

Jul 27, 2023
Unscored —

CVE-2023-38564

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. An app may be able to modify p…

Apple macOS macOS

Jul 27, 2023
Unscored —

CVE-2023-38565

A path handling issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.6.8, iOS 16.6 an…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jul 27, 2023
Unscored —

CVE-2023-38571 Public exploit

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Big Sur 11.7.9, macOS Monte…

Apple macOS macOS

Jul 28, 2023
Unscored —

CVE-2023-38572

The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 27, 2023
Unscored —

CVE-2023-38580

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 1…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jul 27, 2023
Unscored —

CVE-2023-38593

A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.8, iOS 16.6 and iPadOS 16.…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jul 27, 2023
Unscored —

CVE-2023-38594

The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 26, 2023
Unscored —

CVE-2023-38595

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 27, 2023
Unscored —

CVE-2023-38597

The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS …

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Jul 26, 2023
Unscored —

CVE-2023-38601

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 1…

Apple macOS macOS

Jul 28, 2023
Unscored —

CVE-2023-38602

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Monterey 12.6.8, macOS Ven…

Apple macOS macOS

Jul 27, 2023
Unscored —

CVE-2023-38603

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A re…

Apple macOS iOS and iPadOS macOS iOS

Jul 27, 2023
Unscored —

CVE-2023-38608

The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.5. An app may be ab…

Apple macOS macOS

Jul 27, 2023
Unscored —

CVE-2023-38609 Public exploit

An injection issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.5. An app may …

Apple macOS macOS

Jul 28, 2023
Unscored —

CVE-2023-38611

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macO…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 27, 2023
Unscored —

CVE-2023-38616

A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13.5. An app may be a…

Apple macOS macOS

Sep 6, 2023
Unscored —

CVE-2023-40392

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventur…

Apple macOS macOS

Sep 6, 2023
Unscored —

CVE-2023-40397

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. A remote attacker may be able …

Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu

Sep 6, 2023
Unscored —

CVE-2023-40442

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Big Su…

Apple macOS iOS and iPadOS macOS iOS

Sep 11, 2023

Revision history

2023-09-11 #5
CVE-2023-40440, CVE-2023-40442, CVE-2023-41990 ergänzt
2023-09-07 #4
CVE's ergänzt
2023-09-06 #3
CVE ergänzt
2023-07-27 #2
CVE's ergänzt
2023-07-24 #1
Initiale Fassung

References

Apple Security Advisory vom 2023-07-24
https://support.apple.com/en-us/HT213845
Apple Security Advisory vom 2023-07-24
https://support.apple.com/en-us/HT213844
Apple Security Advisory vom 2023-07-24
https://support.apple.com/en-us/HT213843