A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, macOS Big Sur 11.7.5, macOS Monterey 12.6.4. An app may be able to execute arbitrary code with kernel privileges.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/HT213670 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/HT213675 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/HT213677 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/HT213670 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/HT213675 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/HT213677 | Release Notes Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 08:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.apple.com/en-us/HT213670 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/HT213675 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/HT213677 - Release Notes, Vendor Advisory |
18 Jan 2024, 14:47
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| First Time |
Apple
Apple macos |
|
| CPE | cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* | |
| CWE | CWE-416 | |
| References | () https://support.apple.com/en-us/HT213677 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/HT213675 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/HT213670 - Release Notes, Vendor Advisory |
10 Jan 2024, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-10 22:15
Updated : 2024-11-21 08:03
NVD link : CVE-2023-32378
Mitre link : CVE-2023-32378
CVE.ORG link : CVE-2023-32378
JSON object : View
Products Affected
apple
- macos
CWE
CWE-416
Use After Free