CVSS: 8.6EPSS: 0%CPEs: 3EXPL: 0CVE-2022-46720
https://notcve.org/view.php?id=CVE-2022-46720
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. An app may be able to break out of its sandbox • https://support.apple.com/en-us/HT213530 https://support.apple.com/en-us/HT213532 • CWE-190: Integer Overflow or Wraparound •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-27934
https://notcve.org/view.php?id=CVE-2023-27934
A memory initialization issue was addressed. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. A remote attacker may be able to cause unexpected app termination or arbitrary code execution. • https://support.apple.com/en-us/HT213670 https://support.apple.com/en-us/HT213677 • CWE-665: Improper Initialization •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2023-27943
https://notcve.org/view.php?id=CVE-2023-27943
This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. Files downloaded from the internet may not have the quarantine flag applied. • https://support.apple.com/en-us/HT213670 https://support.apple.com/en-us/HT213676 •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2023-27951
https://notcve.org/view.php?id=CVE-2023-27951
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An archive may be able to bypass Gatekeeper. • https://support.apple.com/en-us/HT213670 https://support.apple.com/en-us/HT213675 https://support.apple.com/en-us/HT213677 •
CVSS: 4.7EPSS: 0%CPEs: 1EXPL: 0CVE-2023-27952
https://notcve.org/view.php?id=CVE-2023-27952
A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.3. An app may bypass Gatekeeper checks. • https://support.apple.com/en-us/HT213670 https://support.apple.com/kb/HT214119 http://seclists.org/fulldisclosure/2024/Jul/18 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •