Summary
Ein Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.
Product
Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.
Vulnerabilities 64
-
High 8.8
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16…
-
High 8.2
An access issue was addressed with improvements to the sandbox. This issue is fixed in macOS Ventura 13.6.3, macOS Sono…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17…
-
High 7.8
The issue was addressed with improved bounds checks. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1,…
-
High 7.8
The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14.1, tvOS 17.1, macOS Montere…
-
High 7.8
This issue was addressed with improved handling of symlinks. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tv…
-
High 7.8
Integer Overflow or Wraparound in vim/vim
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.
-
High 7.8
Untrusted Search Path in vim/vim
Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833.
-
High 7.8
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.
-
High 7.8
Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.1857.
-
High 7.8
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.
-
High 7.8
Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.1858.
-
High 7.8
Heap-based Buffer Overflow in vim/vim
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.
-
High 7.7
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ve…
-
High 7.7CVE-2023-42860 Public exploit
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1, macOS Montere…
-
High 7.7
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ve…
-
High 7.5
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 16.7.2 an…
-
High 7.3
Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.1840.
-
Medium 6.2
A privacy issue was addressed with improved handling of files. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, …
-
Medium 5.5
An app may be able to access protected user data. This issue is fixed in macOS Sonoma 14, macOS Ventura 13.6.1. The iss…
-
Medium 5.5
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1. An attacker may be able to …
-
Medium 5.5
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macO…
-
Medium 5.5
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ve…
-
Medium 5.3
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.3…
-
Medium 5.3
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ve…
-
Medium 4.8
Out-of-bounds Write in vim/vim
Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847.
-
Medium 4.4
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma…
-
Medium 4.4
The issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.3, ma…
-
Medium 4.3
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ve…
-
Low 2.7
The issue was resolved by sanitizing logging This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, macOS M…
-
Unscored —
A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAG_INKNAME…
-
Unscored —
iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.
-
Unscored —
The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.6.1. An attacker ma…
-
Unscored —CVE-2023-40404 Public exploit
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sonoma 14.1. An app …
-
Unscored —
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma…
-
Unscored —
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Sonoma …
-
Unscored —
The issue was addressed with improved handling of caches. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monter…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey …
-
Unscored —
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1, macOS Montere…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey …
-
Unscored —
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1. An app may be…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, i…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey …
-
Unscored —
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma…
-
Unscored —
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.1 and…
-
Unscored —
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7…
-
Unscored —
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17.1 and iPadOS 17.1, …
-
Unscored —
The issue was addressed with improved handling of caches. This issue is fixed in macOS Sonoma 14.1, iOS 16.7.2 and iPad…
-
Unscored —
This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, w…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, Safari 17.1, iOS 16.7.…
-
Unscored —
This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, w…
-
Unscored —
The issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1. An…
-
Unscored —
This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, w…
-
Unscored —
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Sonoma …
-
Unscored —
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1. An app may be able to access se…
-
Unscored —
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 1…
-
Unscored —
An authentication issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1, iOS 17.…
-
Unscored —
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. A…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey …
-
Unscored —
The issue was addressed with improved permissions logic. This issue is fixed in macOS Sonoma 14.1. An app may be able t…
-
Unscored —
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1,…
-
Unscored —
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1. An attacker with …
Revision history
-
#3
PoC für CVE-2023-42942 aufgenommen
-
#2
CVE's ergänzt
-
#1
Initiale Fassung
References
-
Apple Security Advisory HT213983 vom 2023-10-25
https://support.apple.com/en-us/HT213983
-
Apple Security Advisory HT213984 vom 2023-10-25
https://support.apple.com/en-us/HT213984
-
Apple Security Advisory HT213985 vom 2023-10-25
https://support.apple.com/en-us/HT213985
-
PoC CVE-2023-42942 vom 2024-03-01
https://jhftss.github.io/CVE-2023-42942-xpcroleaccountd-Root-Privilege-Escalation/