Apple Macos Ventura vulnerabilities

CVE-2024-23296 [HIGH] CVE-2024-23296: macOS Ventura 13.6.7 Apple Security Update: About the security content of macOS Ventura 13.6.7 Product: macOS Ventura Version: 13.6.7 CVE: CVE-2024-23296 Component: CVE-2024-23296

CVE-2023-28204 [MEDIUM] CVE-2023-28204: macOS Ventura 13.4 Apple Security Update: About the security content of macOS Ventura 13.4 Product: macOS Ventura Version: 13.4 CVE: CVE-2023-28204 Component: WebKit Impact: Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been actively exploited. Description: An out-of-bounds read was addressed with improved input validation.

CVE-2023-38606 [MEDIUM] CVE-2023-38606: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-38606 Component: Kernel Impact: An app may be able to modify sensitive kernel state. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1. Description: This issue was addressed with improved state management.

CVE-2025-43200 [MEDIUM] CVE-2025-43200: macOS Ventura 13.7.4 Apple Security Update: About the security content of macOS Ventura 13.7.4 Product: macOS Ventura Version: 13.7.4 CVE: CVE-2025-43200 Component: Messages Impact: A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals. Description: This issue was addre

CVE-2024-6387 [HIGH] CVE-2024-6387: macOS Ventura 13.6.8 Apple Security Update: About the security content of macOS Ventura 13.6.8 Product: macOS Ventura Version: 13.6.8 CVE: CVE-2024-6387 Component: CVE-2024-6387

CVE-2023-22809 [HIGH] CVE-2023-22809: macOS Ventura 13.4 Apple Security Update: About the security content of macOS Ventura 13.4 Product: macOS Ventura Version: 13.4 CVE: CVE-2023-22809 Component: CVE-2023-22809

CVE-2022-46689 [HIGH] CVE-2022-46689: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-46689 Component: Kernel Impact: An app may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with additional validation.

CVE-2022-42864 [HIGH] CVE-2022-42864: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-42864 Component: IOHIDFamily Impact: An app may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with improved state handling.

CVE-2022-46691 [HIGH] CVE-2022-46691: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-46691 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A memory consumption issue was addressed with improved memory handling.

CVE-2022-46700 [HIGH] CVE-2022-46700: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-46700 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved input validation.

CVE-2022-46692 [MEDIUM] CVE-2022-46692: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-46692 Component: WebKit Impact: Processing maliciously crafted web content may bypass Same Origin Policy Description: A logic issue was addressed with improved state management.

CVE-2023-23496 [HIGH] CVE-2023-23496: macOS Ventura 13.2 Apple Security Update: About the security content of macOS Ventura 13.2 Product: macOS Ventura Version: 13.2 CVE: CVE-2023-23496 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: The issue was addressed with improved checks.

CVE-2022-46690 [HIGH] CVE-2022-46690: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-46690 Component: IOMobileFrameBuffer Impact: An app may be able to execute arbitrary code with kernel privileges Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2022-42855 [HIGH] CVE-2022-42855: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-42855 Component: Preferences Impact: An app may be able to use arbitrary entitlements Description: A logic issue was addressed with improved state management.

CVE-2022-46695 [MEDIUM] CVE-2022-46695: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-46695 Component: Safari Impact: Visiting a website that frames malicious content may lead to UI spoofing Description: A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation.

CVE-2022-42840 [HIGH] CVE-2022-42840: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-42840 Component: Photos Impact: Shake-to-undo may allow a deleted photo to be re-surfaced without authentication Description: The issue was addressed with improved bounds checks.

CVE-2022-40303 [HIGH] CVE-2022-40303: macOS Ventura 13.0.1 Apple Security Update: About the security content of macOS Ventura 13.0.1 Product: macOS Ventura Version: 13.0.1 CVE: CVE-2022-40303 Component: About Apple security updates Impact: A remote user may be able to cause unexpected app termination or arbitrary code execution Description: An integer overflow was addressed through improved input validation.

CVE-2022-42852 [MEDIUM] CVE-2022-42852: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-42852 Component: WebKit Impact: Processing maliciously crafted web content may result in the disclosure of process memory Description: The issue was addressed with improved memory handling.

CVE-2022-42837 [CRITICAL] CVE-2022-42837: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-42837 Component: IOMobileFrameBuffer Impact: An app may be able to execute arbitrary code with kernel privileges Description: An out-of-bounds access issue was addressed with improved bounds checking.

CVE-2022-40304 [HIGH] CVE-2022-40304: macOS Ventura 13.0.1 Apple Security Update: About the security content of macOS Ventura 13.0.1 Product: macOS Ventura Version: 13.0.1 CVE: CVE-2022-40304 Component: About Apple security updates Impact: A remote user may be able to cause unexpected app termination or arbitrary code execution Description: An integer overflow was addressed through improved input validation.