deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-23494
Published: 2023-05-08
Description: A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 16.4 and iPadOS 16.4. A user in a privileged network position may be able to cause a denial-of-service.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://support.apple.com/en-us/HT213676; https://support.apple.com/en-us/HT213676
CVE: CVE-2023-23523
Published: 2023-05-08
Description: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. Photos belonging to the Hidden Photos Album could be viewed without authentication through Visual Lookup.
CVSS Score: 3.3 (LOW)
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213676; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-23525
Published: 2023-05-08
Description: This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5. An app may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213675; https://support.apple.com/en-us/HT213676
CVE: CVE-2023-23526
Published: 2023-05-08
Description: This was addressed with additional checks by Gatekeeper on files downloaded from an iCloud shared-by-me folder. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. A file from an iCloud shared-by-me folder may be able to bypass Gatekeeper.
CVSS Score: 9.8 (CRITICAL)
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213676; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-23527
Published: 2023-05-08
Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. A user may gain access to protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213674; https://support.apple.com/en-us/HT213675
CVE: CVE-2023-23528
Published: 2023-05-08
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 16.4, iOS 16.4 and iPadOS 16.4. Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213674; https://support.apple.com/en-us/HT213676; https://support.apple.com/en-us/HT213674
CVE: CVE-2023-23532
Published: 2023-05-08
Description: This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.6 and iPadOS 15.7.6. An app may be able to break out of its sandbox.
CVSS Score: 8.8 (HIGH)
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213676; https://support.apple.com/en-us/HT213765
CVE: CVE-2023-23533
Published: 2023-05-08
Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. An app may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213677; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-23534
Published: 2023-05-08
Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Big Sur 11.7.5. Processing a maliciously crafted image may result in disclosure of process memory.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213675; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-23535
Published: 2023-05-08
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.6, tvOS 16.4, watchOS 9.4. Processing a maliciously crafted image may result in disclosure of process memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213673; https://support.apple.com/en-us/HT213674
CVE: CVE-2023-23536
Published: 2023-05-08
Description: The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213673; https://support.apple.com/en-us/HT213674
CVE: CVE-2023-23537
Published: 2023-05-08
Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, watchOS 9.4, macOS Big Sur 11.7.5. An app may be able to read sensitive location information.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213673; https://support.apple.com/en-us/HT213675
CVE: CVE-2023-23538
Published: 2023-05-08
Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. An app may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213677; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-23540
Published: 2023-05-08
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.4, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT213675; https://support.apple.com/en-us/HT213676; https://support.apple.com/en-us/HT213677
CVE: CVE-2023-23541
Published: 2023-05-08
Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4. An app may be able to access information about a user’s contacts.
CVSS Score: 3.3 (LOW)
CWE: CWE-922
References: https://support.apple.com/en-us/HT213673; https://support.apple.com/en-us/HT213676; https://support.apple.com/en-us/HT213673
CVE: CVE-2023-23542
Published: 2023-05-08
Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-922
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213675; https://support.apple.com/en-us/HT213677
CVE: CVE-2023-23543
Published: 2023-05-08
Description: The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. A sandboxed app may be able to determine which app is currently using the camera.
CVSS Score: 3.6 (LOW)
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213673; https://support.apple.com/en-us/HT213676
CVE: CVE-2023-27928
Published: 2023-05-08
Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4, macOS Big Sur 11.7.5. An app may be able to access information about a user’s contacts.
CVSS Score: 3.3 (LOW)
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213673; https://support.apple.com/en-us/HT213674
CVE: CVE-2023-27929
Published: 2023-05-08
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. Processing a maliciously crafted image may result in disclosure of process memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213674; https://support.apple.com/en-us/HT213676
CVE: CVE-2023-27931
Published: 2023-05-08
Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.3, tvOS 16.4, watchOS 9.4. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-203
References: https://support.apple.com/en-us/HT213603; https://support.apple.com/en-us/HT213604; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-27932
Published: 2023-05-08
Description: This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, tvOS 16.4, watchOS 9.4. Processing maliciously crafted web content may bypass Same Origin Policy.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-346
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213671; https://support.apple.com/en-us/HT213674
CVE: CVE-2023-27933
Published: 2023-05-08
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app with root privileges may be able to execute arbitrary code with kernel privileges.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213674; https://support.apple.com/en-us/HT213676
CVE: CVE-2023-27934
Published: 2023-05-08
Description: A memory initialization issue was addressed. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. A remote attacker may be able to cause unexpected app termination or arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-665, CWE-120
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213677; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-27935
Published: 2023-05-08
Description: The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A remote user may be able to cause unexpected app termination or arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213675; https://support.apple.com/en-us/HT213677
CVE: CVE-2023-27936
Published: 2023-05-08
Description: An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to cause unexpected system termination or write kernel memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213673; https://support.apple.com/en-us/HT213675
CVE: CVE-2023-27937
Published: 2023-05-08
Description: An integer overflow was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. Parsing a maliciously crafted plist may lead to an unexpected app termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213674; https://support.apple.com/en-us/HT213675
CVE: CVE-2023-27938
Published: 2023-05-08
Description: An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in GarageBand for macOS 10.4.8. Parsing a maliciously crafted MIDI file may lead to an unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://support.apple.com/en-us/HT213650; https://support.apple.com/en-us/HT213650
CVE: CVE-2023-27941
Published: 2023-05-08
Description: A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to disclose kernel memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-1284
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213673; https://support.apple.com/en-us/HT213675
CVE: CVE-2023-27942
Published: 2023-05-08
Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-922
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213674; https://support.apple.com/en-us/HT213675
CVE: CVE-2023-27943
Published: 2023-05-08
Description: This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. Files downloaded from the internet may not have the quarantine flag applied.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213676; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-27944
Published: 2023-05-08
Description: This issue was addressed with a new entitlement. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to break out of its sandbox.
CVSS Score: 8.6 (HIGH)
CWE: CWE-346
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213675; https://support.apple.com/en-us/HT213677
CVE: CVE-2023-27945
Published: 2023-05-08
Description: This issue was addressed with improved entitlements. This issue is fixed in Xcode 14.3, macOS Big Sur 11.7.7, macOS Monterey 12.6.6. A sandboxed app may be able to collect system logs.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213679; https://support.apple.com/en-us/HT213759; https://support.apple.com/en-us/HT213760
CVE: CVE-2023-27946
Published: 2023-05-08
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213673; https://support.apple.com/en-us/HT213675
CVE: CVE-2023-27949
Published: 2023-05-08
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS 15.7.4. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213673; https://support.apple.com/en-us/HT213677
CVE: CVE-2023-27951
Published: 2023-05-08
Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An archive may be able to bypass Gatekeeper.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213675; https://support.apple.com/en-us/HT213677
CVE: CVE-2023-27952
Published: 2023-05-08
Description: A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.3. An app may bypass Gatekeeper checks.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: http://seclists.org/fulldisclosure/2024/Jul/18; https://support.apple.com/en-us/HT213670; https://support.apple.com/kb/HT214119
CVE: CVE-2023-27953
Published: 2023-05-08
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213675; https://support.apple.com/en-us/HT213677
CVE: CVE-2023-27954
Published: 2023-05-08
Description: The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. A website may be able to track sensitive user information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213671; https://support.apple.com/en-us/HT213673
CVE: CVE-2023-27955
Published: 2023-05-08
Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, macOS Big Sur 11.7.5. An app may be able to read arbitrary files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213674; https://support.apple.com/en-us/HT213675
CVE: CVE-2023-27956
Published: 2023-05-08
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. Processing a maliciously crafted image may result in disclosure of process memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213673; https://support.apple.com/en-us/HT213674
CVE: CVE-2023-27957
Published: 2023-05-08
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-27958
Published: 2023-05-08
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-770
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213675; https://support.apple.com/en-us/HT213677
CVE: CVE-2023-27959
Published: 2023-05-08
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213676; https://support.apple.com/en-us/HT213676
CVE: CVE-2023-27960
Published: 2023-05-08
Description: This issue was addressed by removing the vulnerable code. This issue is fixed in GarageBand for macOS 10.4.8. An app may be able to gain elevated privileges during the installation of GarageBand.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT213650; https://support.apple.com/en-us/HT213650
CVE: CVE-2023-27961
Published: 2023-05-08
Description: Multiple validation issues were addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, watchOS 9.4, macOS Big Sur 11.7.5. Importing a maliciously crafted calendar invitation may exfiltrate user information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-1284
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213673; https://support.apple.com/en-us/HT213675
CVE: CVE-2023-27962
Published: 2023-05-08
Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-346
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213675; https://support.apple.com/en-us/HT213677
CVE: CVE-2023-27963
Published: 2023-05-08
Description: The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. A shortcut may be able to use sensitive data with certain actions without prompting the user.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213673; https://support.apple.com/en-us/HT213674
CVE: CVE-2023-27965
Published: 2023-05-08
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Studio Display Firmware Update 16.4. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213672; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-27966
Published: 2023-05-08
Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may be able to break out of its sandbox.
CVSS Score: 6.3 (MEDIUM)
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-27967
Published: 2023-05-08
Description: The issue was addressed with improved memory handling. This issue is fixed in Xcode 14.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.
CVSS Score: 8.6 (HIGH)
References: https://support.apple.com/en-us/HT213679; https://support.apple.com/en-us/HT213679
CVE: CVE-2023-27968
Published: 2023-05-08
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-120, CWE-120
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-27969
Published: 2023-05-08
Description: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213673; https://support.apple.com/en-us/HT213674
CVE: CVE-2023-27970
Published: 2023-05-08
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT213676; https://support.apple.com/en-us/HT213676
CVE: CVE-2023-28178
Published: 2023-05-08
Description: A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app may be able to bypass Privacy preferences.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/en-us/HT213674; https://support.apple.com/en-us/HT213676