CVE-2023-23504

Published Feb 27, 2023

Last updated a year ago

Overview

Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2, watchOS 9.3, iOS 15.7.3 and iPadOS 15.7.3, tvOS 16.3, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code with kernel privileges.
Source: product-security@apple.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "25571006-94E5-43C8-849C-600C7E5CE329",
            "versionEndExcluding": "15.7.3"
          },
          {
            "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "84A6CE41-699B-4511-8B52-625F271CA9FE",
            "versionEndExcluding": "16.3",
            "versionStartIncluding": "16.0"
          },
          {
            "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6EB34B65-AC55-488B-8D12-F2E6FBCC284A",
            "versionEndExcluding": "15.7.3"
          },
          {
            "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "08EA5BA7-5C1B-43E5-8988-22C33DAAE754",
            "versionEndExcluding": "16.3",
            "versionStartIncluding": "16.0"
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C71359B9-7DCE-4F45-B03F-77CF313A74EA",
            "versionEndExcluding": "12.6.3",
            "versionStartIncluding": "12.0.0"
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9CEC72CB-1F5B-4BF5-80F0-357E27855D2A",
            "versionEndExcluding": "13.2",
            "versionStartIncluding": "13.0"
          },
          {
            "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "51F6EA1D-B654-455F-AB85-2E3C486F0C81",
            "versionEndExcluding": "16.3"
          },
          {
            "criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "870BF5F9-6408-4EB6-8821-1881E66B003B",
            "versionEndExcluding": "9.3"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 3.1

Weaknesses

Configurations

References