Skip to content
OpenAdvisories
High WID-SEC-2023-3094 49 CVEs

Apple macOS: Mehrere Schwachstellen

Published Dec 11, 2023 · Updated Mar 25, 2024 · Revision 2 · de-DE

Vendor: Apple Product: macOS Platform: macOS

Summary

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen.

Product

Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.

Vulnerabilities 49

  • High 8.8
    CVE-2023-42906

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14…

    Apple macOS macOS
  • High 8.8
    CVE-2023-42913

    This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.2. Remote Login sess…

    Apple macOS macOS
  • High 8.8
    CVE-2023-42950

    A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and …

    Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu Wolfi
  • High 8.6
    CVE-2023-42947

    A path handling issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.7.2, macOS Ventu…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • High 8.3
    CVE-2023-42931 Public exploit

    The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Mon…

    Apple macOS macOS
  • High 7.8
    CVE-2023-42881

    The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2. Processing a file may …

    Apple macOS macOS
  • High 7.8
    CVE-2023-42892

    A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.6.3, macO…

    Apple macOS macOS
  • High 7.8
    CVE-2023-42903

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14…

    Apple macOS macOS
  • High 7.8
    CVE-2023-42908

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14…

    Apple macOS macOS
  • High 7.8
    CVE-2023-42926

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14…

    Apple macOS macOS
  • Medium 6.5
    CVE-2023-42956

    The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, ma…

    Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
  • Medium 5.5
    CVE-2023-40390

    A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Sonoma 14.…

    Apple macOS macOS
  • Medium 5.5
    CVE-2023-42884

    This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma 14.2, iO…

    Apple macOS iOS and iPadOS tvOS macOS iOS
  • Medium 5.5
    CVE-2023-42930

    This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Mo…

    Apple macOS macOS
  • Medium 5.5
    CVE-2023-42936

    This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.2…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Medium 4.0
    CVE-2023-5344

    Heap-based Buffer Overflow in vim/vim

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2020-19185

    Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attac…

    ncurses Debian
  • Unscored —
    CVE-2020-19186

    Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers…

    ncurses Debian
  • Unscored —
    CVE-2020-19187

    Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote attackers t…

    ncurses Debian
  • Unscored —
    CVE-2020-19188

    Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers t…

    ncurses Debian
  • Unscored —
    CVE-2020-19189

    Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote …

    ncurses ncurses Debian Ubuntu
  • Unscored —
    CVE-2020-19190

    Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause…

    ncurses Debian
  • Unscored —
    CVE-2023-42842

    The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1. An app may be able to access se…

    Apple macOS macOS
  • Unscored —
    CVE-2023-42874

    This issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.2. Secure text fields m…

    Apple macOS macOS
  • Unscored —
    CVE-2023-42882

    The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2. Processing an image ma…

    Apple macOS macOS
  • Unscored —
    CVE-2023-42883

    The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, iOS 17.2 …

    Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  • Unscored —
    CVE-2023-42886

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.2, macOS Vent…

    Apple macOS macOS
  • Unscored —
    CVE-2023-42890

    The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, watchOS 1…

    Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  • Unscored —
    CVE-2023-42891

    An authentication issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.2, macOS V…

    Apple macOS macOS
  • Unscored —
    CVE-2023-42894

    This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma 14.2, ma…

    Apple macOS macOS
  • Unscored —
    CVE-2023-42898

    The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, watchOS 10.2, iOS 17.2…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Unscored —
    CVE-2023-42899

    The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Unscored —
    CVE-2023-42900

    The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.2. An app may be able to access us…

    Apple macOS macOS
  • Unscored —
    CVE-2023-42901

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14…

    Apple macOS macOS
  • Unscored —
    CVE-2023-42902

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14…

    Apple macOS macOS
  • Unscored —
    CVE-2023-42904

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14…

    Apple macOS macOS
  • Unscored —
    CVE-2023-42905

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14…

    Apple macOS macOS
  • Unscored —
    CVE-2023-42907

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14…

    Apple macOS macOS
  • Unscored —
    CVE-2023-42909

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14…

    Apple macOS macOS
  • Unscored —
    CVE-2023-42910

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14…

    Apple macOS macOS
  • Unscored —
    CVE-2023-42911

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14…

    Apple macOS macOS
  • Unscored —
    CVE-2023-42912

    Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14…

    Apple macOS macOS
  • Unscored —
    CVE-2023-42914

    The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Unscored —
    CVE-2023-42919

    A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Unscored —
    CVE-2023-42922

    This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma 14.2, iO…

    Apple macOS iOS and iPadOS macOS iOS
  • Unscored —
    CVE-2023-42924

    A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3. An ap…

    Apple macOS macOS
  • Unscored —
    CVE-2023-42927 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

  • Unscored —
    CVE-2023-42932

    A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS…

    Apple macOS macOS
  • Unscored —
    CVE-2023-45866 Public exploit

    Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encr…

    bluez bluez bluez Debian Ubuntu Azure Linux

Revision history

  1. #2

    CVE's ergänzt

  2. #1

    Initiale Fassung

References