CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2023-23534
https://notcve.org/view.php?id=CVE-2023-23534
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Big Sur 11.7.5. Processing a maliciously crafted image may result in disclosure of process memory. • https://support.apple.com/en-us/HT213670 https://support.apple.com/en-us/HT213675 •
CVSS: 6.7EPSS: 0%CPEs: 6EXPL: 0CVE-2023-27933
https://notcve.org/view.php?id=CVE-2023-27933
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. An app with root privileges may be able to execute arbitrary code with kernel privileges. • https://support.apple.com/en-us/HT213670 https://support.apple.com/en-us/HT213674 https://support.apple.com/en-us/HT213676 https://support.apple.com/en-us/HT213677 https://support.apple.com/en-us/HT213678 •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2023-23538
https://notcve.org/view.php?id=CVE-2023-23538
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. An app may be able to modify protected parts of the file system. • https://support.apple.com/en-us/HT213670 https://support.apple.com/en-us/HT213677 •
CVSS: 7.8EPSS: 0%CPEs: 7EXPL: 0CVE-2023-27937
https://notcve.org/view.php?id=CVE-2023-27937
An integer overflow was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. Parsing a maliciously crafted plist may lead to an unexpected app termination or arbitrary code execution. • https://support.apple.com/en-us/HT213670 https://support.apple.com/en-us/HT213674 https://support.apple.com/en-us/HT213675 https://support.apple.com/en-us/HT213676 https://support.apple.com/en-us/HT213677 https://support.apple.com/en-us/HT213678 • CWE-190: Integer Overflow or Wraparound •
CVSS: 8.6EPSS: 0%CPEs: 3EXPL: 0CVE-2023-27944
https://notcve.org/view.php?id=CVE-2023-27944
This issue was addressed with a new entitlement. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to break out of its sandbox. • https://support.apple.com/en-us/HT213670 https://support.apple.com/en-us/HT213675 https://support.apple.com/en-us/HT213677 •