CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2023-36854
https://notcve.org/view.php?id=CVE-2023-36854
The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. Processing a file may lead to unexpected app termination or arbitrary code execution. • https://support.apple.com/en-us/HT213843 https://support.apple.com/en-us/HT213844 https://support.apple.com/en-us/HT213845 •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2023-38259
https://notcve.org/view.php?id=CVE-2023-38259
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. An app may be able to access user-sensitive data. • https://support.apple.com/en-us/HT213843 https://support.apple.com/en-us/HT213844 https://support.apple.com/en-us/HT213845 •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2023-35983
https://notcve.org/view.php?id=CVE-2023-35983
This issue was addressed with improved data protection. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. An app may be able to modify protected parts of the file system. • https://support.apple.com/en-us/HT213843 https://support.apple.com/en-us/HT213844 https://support.apple.com/en-us/HT213845 • CWE-863: Incorrect Authorization •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2023-32442
https://notcve.org/view.php?id=CVE-2023-32442
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Ventura 13.5, macOS Monterey 12.6.8. A shortcut may be able to modify sensitive Shortcuts app settings. • https://support.apple.com/en-us/HT213843 https://support.apple.com/en-us/HT213844 •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2023-32418
https://notcve.org/view.php?id=CVE-2023-32418
The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. Processing a file may lead to unexpected app termination or arbitrary code execution. • https://support.apple.com/en-us/HT213843 https://support.apple.com/en-us/HT213844 https://support.apple.com/en-us/HT213845 • CWE-94: Improper Control of Generation of Code ('Code Injection') •