Apple Macos Ventura vulnerabilities

CVE-2023-42832 [HIGH] CVE-2023-42832: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-42832 Component: Software Update Impact: An app may be able to gain root privileges Description: A race condition was addressed with improved state handling.

CVE-2023-38616 [HIGH] CVE-2023-38616: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-38616 Component: AMD Impact: An app may be able to execute arbitrary code with kernel privileges Description: A race condition was addressed with improved state handling.

CVE-2023-38601 [HIGH] CVE-2023-38601: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-38601 Component: Net-SNMP Impact: An app may be able to modify protected parts of the file system Description: This issue was addressed by removing the vulnerable code.

CVE-2023-38592 [HIGH] CVE-2023-38592: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-38592 Component: WebKit Impact: Processing web content may lead to arbitrary code execution Description: A logic issue was addressed with improved restrictions.

CVE-2023-37450 [HIGH] CVE-2023-37450: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-37450 Component: WebKit Impact: Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: The issue was addressed with improved checks.

CVE-2023-36854 [HIGH] CVE-2023-36854: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-36854 Component: Grapher Impact: Processing a file may lead to unexpected app termination or arbitrary code execution Description: The issue was addressed with improved checks.

CVE-2023-38572 [HIGH] CVE-2023-38572: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-38572 Component: WebKit Impact: A website may be able to bypass Same Origin Policy Description: The issue was addressed with improved checks.

CVE-2023-32441 [HIGH] CVE-2023-32441: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-32441 Component: Kernel Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.

CVE-2023-40440 [HIGH] CVE-2023-40440: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-40440 Component: Mail Impact: A S/MIME encrypted email may be inadvertently sent unencrypted Description: This issue was addressed with improved state management of S/MIME encrypted emails.

CVE-2023-29491 [HIGH] CVE-2023-29491: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-29491 Component: Music Impact: An app may be able to bypass Privacy preferences Description: This issue was addressed with improved validation of symlinks.

CVE-2023-32418 [HIGH] CVE-2023-32418: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-32418 Component: Grapher Impact: Processing a file may lead to unexpected app termination or arbitrary code execution Description: The issue was addressed with improved checks.

CVE-2023-38590 [HIGH] CVE-2023-38590: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-38590 Component: Kernel Impact: A remote user may be able to cause unexpected system termination or corrupt kernel memory Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2023-38580 [HIGH] CVE-2023-38580: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-38580 Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling.

CVE-2023-38594 [HIGH] CVE-2023-38594: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-38594 Component: WebKit Impact: Processing web content may lead to arbitrary code execution Description: The issue was addressed with improved checks.

CVE-2023-38571 [HIGH] CVE-2023-38571: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-38571 Component: Music Impact: An app may be able to bypass Privacy preferences Description: This issue was addressed with improved validation of symlinks.

CVE-2023-32444 [HIGH] CVE-2023-32444: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-32444 Component: NSSpellChecker Impact: A sandboxed process may be able to circumvent sandbox restrictions Description: A logic issue was addressed with improved validation.

CVE-2023-42866 [HIGH] CVE-2023-42866: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-42866 Component: WebKit Impact: Processing web content may lead to arbitrary code execution Description: The issue was addressed with improved memory handling.

CVE-2023-32654 [MEDIUM] CVE-2023-32654: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-32654 Component: Time Zone Impact: A user may be able to read information belonging to another user Description: A logic issue was addressed with improved state management.

CVE-2022-3970 [MEDIUM] CVE-2022-3970: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2022-3970 Component: ImageIO Impact: Processing a maliciously crafted image may lead to a denial of service Description: The issue was addressed with improved memory handling.

CVE-2023-2426 [MEDIUM] CVE-2023-2426: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-2426 Component: CVE-2023-2426