Page 26 of 572 results (0.008 seconds)

CVSS: 10.0EPSS: 0%CPEs: 5EXPL: 0

CVE-2023-32393 – webkitgtk: arbitrary code execution

https://notcve.org/view.php?id=CVE-2023-32393

27 Jul 2023 — The issue was addressed with improved memory handling. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. Processing web content may lead to arbitrary code execution. A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution. • https://security.gentoo.org/glsa/202401-04 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0

CVE-2023-32734 – Apple Security Advisory 2023-07-24-8

https://notcve.org/view.php?id=CVE-2023-32734

26 Jul 2023 — The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6. An app may be able to execute arbitrary code with kernel privileges. macOS Ventura 13.5 addresses bypass, code execution, out of bounds read, and use-after-free vulnerabilities. • https://support.apple.com/en-us/HT213841 •

CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0

CVE-2023-35983 – Apple Security Advisory 2023-07-24-6

https://notcve.org/view.php?id=CVE-2023-35983

26 Jul 2023 — This issue was addressed with improved data protection. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. An app may be able to modify protected parts of the file system. macOS Ventura 13.5 addresses bypass, code execution, out of bounds read, and use-after-free vulnerabilities. • https://support.apple.com/en-us/HT213843 • CWE-863: Incorrect Authorization •

CVSS: 7.8EPSS: 0%CPEs: 9EXPL: 0

CVE-2023-35993 – Apple Security Advisory 2023-07-24-6

https://notcve.org/view.php?id=CVE-2023-35993

26 Jul 2023 — A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to execute arbitrary code with kernel privileges. macOS Ventura 13.5 addresses bypass, code execution, out of bounds read, and use-after-free vulnerabilities. • https://support.apple.com/en-us/HT213841 • CWE-416: Use After Free •

CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0

CVE-2023-38410 – Apple Security Advisory 2023-07-24-2

https://notcve.org/view.php?id=CVE-2023-38410

26 Jul 2023 — The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A user may be able to elevate privileges. macOS Ventura 13.5 addresses bypass, code execution, out of bounds read, and use-after-free vulnerabilities. • https://support.apple.com/en-us/HT213841 • CWE-276: Incorrect Default Permissions •

CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2023-38421 – Apple macOS Hydra Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

https://notcve.org/view.php?id=CVE-2023-38421

26 Jul 2023 — The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5, macOS Monterey 12.6.8. Processing a 3D model may result in disclosure of process memory. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the Hydra library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the Hydra framework. • https://support.apple.com/en-us/HT213843 •

CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0

CVE-2023-38424 – Apple Security Advisory 2023-07-24-2

https://notcve.org/view.php?id=CVE-2023-38424

26 Jul 2023 — The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges. macOS Ventura 13.5 addresses bypass, code execution, out of bounds read, and use-after-free vulnerabilities. • https://support.apple.com/en-us/HT213841 •

CVSS: 8.3EPSS: 0%CPEs: 3EXPL: 0

CVE-2023-38425 – Apple Security Advisory 2023-07-24-2

https://notcve.org/view.php?id=CVE-2023-38425

26 Jul 2023 — The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges. macOS Ventura 13.5 addresses bypass, code execution, out of bounds read, and use-after-free vulnerabilities. • https://support.apple.com/en-us/HT213841 •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2023-38564 – Apple Security Advisory 2023-07-24-4

https://notcve.org/view.php?id=CVE-2023-38564

26 Jul 2023 — The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. An app may be able to modify protected parts of the file system. macOS Ventura 13.5 addresses bypass, code execution, out of bounds read, and use-after-free vulnerabilities. • https://support.apple.com/en-us/HT213843 •

CVSS: 7.8EPSS: 0%CPEs: 9EXPL: 0

CVE-2023-38565 – Apple Security Advisory 2023-07-24-6

https://notcve.org/view.php?id=CVE-2023-38565

26 Jul 2023 — A path handling issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.6.8, iOS 16.6 and iPadOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to gain root privileges. macOS Ventura 13.5 addresses bypass, code execution, out of bounds read, and use-after-free vulnerabilities. • https://support.apple.com/en-us/HT213841 •