CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2023-38421 – Apple macOS Hydra Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2023-38421
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5, macOS Monterey 12.6.8. Processing a 3D model may result in disclosure of process memory. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the Hydra library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the Hydra framework. • https://support.apple.com/en-us/HT213843 https://support.apple.com/en-us/HT213844 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2023-38564
https://notcve.org/view.php?id=CVE-2023-38564
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. An app may be able to modify protected parts of the file system. • https://support.apple.com/en-us/HT213843 •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2023-36862
https://notcve.org/view.php?id=CVE-2023-36862
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.5. An app may be able to determine a user’s current location. • https://support.apple.com/en-us/HT213843 •
CVSS: 7.8EPSS: 0%CPEs: 9EXPL: 0CVE-2023-38565
https://notcve.org/view.php?id=CVE-2023-38565
A path handling issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.6.8, iOS 16.6 and iPadOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to gain root privileges. • https://support.apple.com/en-us/HT213841 https://support.apple.com/en-us/HT213843 https://support.apple.com/en-us/HT213844 https://support.apple.com/en-us/HT213845 https://support.apple.com/en-us/HT213848 https://support.apple.com/kb/HT213842 https://support.apple.com/kb/HT213846 •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2023-38580
https://notcve.org/view.php?id=CVE-2023-38580
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5, watchOS 9.6. An app may be able to execute arbitrary code with kernel privileges. • https://support.apple.com/en-us/HT213841 https://support.apple.com/en-us/HT213843 https://support.apple.com/en-us/HT213848 •