CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2023-38258
https://notcve.org/view.php?id=CVE-2023-38258
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5, macOS Monterey 12.6.8. Processing a 3D model may result in disclosure of process memory. • https://support.apple.com/en-us/HT213843 https://support.apple.com/en-us/HT213844 •
CVSS: 7.5EPSS: 0%CPEs: 7EXPL: 0CVE-2023-38603
https://notcve.org/view.php?id=CVE-2023-38603
The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A remote user may be able to cause a denial-of-service. • https://support.apple.com/en-us/HT213841 https://support.apple.com/en-us/HT213843 https://support.apple.com/kb/HT213842 https://support.apple.com/kb/HT213844 https://support.apple.com/kb/HT213845 •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2023-38602
https://notcve.org/view.php?id=CVE-2023-38602
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. An app may be able to modify protected parts of the file system. • https://support.apple.com/en-us/HT213843 https://support.apple.com/en-us/HT213844 https://support.apple.com/en-us/HT213845 •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2023-38421 – Apple macOS Hydra Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2023-38421
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5, macOS Monterey 12.6.8. Processing a 3D model may result in disclosure of process memory. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the Hydra library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the Hydra framework. • https://support.apple.com/en-us/HT213843 https://support.apple.com/en-us/HT213844 •
CVSS: 7.8EPSS: 0%CPEs: 9EXPL: 0CVE-2023-38565
https://notcve.org/view.php?id=CVE-2023-38565
A path handling issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.6.8, iOS 16.6 and iPadOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to gain root privileges. • https://support.apple.com/en-us/HT213841 https://support.apple.com/en-us/HT213843 https://support.apple.com/en-us/HT213844 https://support.apple.com/en-us/HT213845 https://support.apple.com/en-us/HT213848 https://support.apple.com/kb/HT213842 https://support.apple.com/kb/HT213846 •