Apple Macos Ventura vulnerabilities

CVE-2023-32402 [MEDIUM] CVE-2023-32402: macOS Ventura 13.4 Apple Security Update: About the security content of macOS Ventura 13.4 Product: macOS Ventura Version: 13.4 CVE: CVE-2023-32402 Component: WebKit Impact: Processing web content may disclose sensitive information Description: An out-of-bounds read was addressed with improved input validation.

CVE-2023-23514 [HIGH] CVE-2023-23514: macOS Ventura 13.2.1 Apple Security Update: About the security content of macOS Ventura 13.2.1 Product: macOS Ventura Version: 13.2.1 CVE: CVE-2023-23514 Component: Kernel Impact: An app may be able to execute arbitrary code with kernel privileges. Description: A use after free issue was addressed with improved memory management.

CVE-2022-46718 [MEDIUM] CVE-2022-46718: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-46718 Component: TCC Impact: An app may be able to read sensitive location information Description: A logic issue was addressed with improved restrictions.

CVE-2023-23522 [MEDIUM] CVE-2023-23522: macOS Ventura 13.2.1 Apple Security Update: About the security content of macOS Ventura 13.2.1 Product: macOS Ventura Version: 13.2.1 CVE: CVE-2023-23522 Component: Shortcuts Impact: An app may be able to observe unprotected user data. Description: A privacy issue was addressed with improved handling of temporary files.

CVE-2022-46703 [MEDIUM] CVE-2022-46703: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-46703 Component: Weather Impact: An app may be able to read sensitive location information Description: A logic issue was addressed with improved restrictions.

CVE-2022-46705 [MEDIUM] CVE-2022-46705: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-46705 Component: WebKit Impact: Visiting a malicious website may lead to address bar spoofing Description: A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation.

CVE-2023-32423 [MEDIUM] CVE-2023-32423: macOS Ventura 13.4 Apple Security Update: About the security content of macOS Ventura 13.4 Product: macOS Ventura Version: 13.4 CVE: CVE-2023-32423 Component: WebKit Impact: Processing web content may disclose sensitive information Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2023-23524 [HIGH] CVE-2023-23524: macOS Ventura 13.2.1 Apple Security Update: About the security content of macOS Ventura 13.2.1 Product: macOS Ventura Version: 13.2.1 CVE: CVE-2023-23524 Component: Security Impact: Processing a maliciously crafted certificate may lead to a denial-of-service Description: A denial-of-service issue was addressed with improved input validation.

CVE-2022-42861 [HIGH] CVE-2022-42861: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-42861 Component: Kernel Impact: An app may be able to break out of its sandbox Description: This issue was addressed with improved checks.

CVE-2023-38545 [CRITICAL] CVE-2023-38545: macOS Ventura 13.6.4 Apple Security Update: About the security content of macOS Ventura 13.6.4 Product: macOS Ventura Version: 13.6.4 CVE: CVE-2023-38545 Component: CVE-2023-38545

CVE-2022-42867 [HIGH] CVE-2022-42867: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-42867 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A use after free issue was addressed with improved memory management.

CVE-2024-2398 [HIGH] CVE-2024-2398: macOS Ventura 13.6.8 Apple Security Update: About the security content of macOS Ventura 13.6.8 Product: macOS Ventura Version: 13.6.8 CVE: CVE-2024-2398 Component: CVE-2024-2398

CVE-2023-38039 [HIGH] CVE-2023-38039: macOS Ventura 13.6.4 Apple Security Update: About the security content of macOS Ventura 13.6.4 Product: macOS Ventura Version: 13.6.4 CVE: CVE-2023-38039 Component: CVE-2023-38039

CVE-2022-37434 [CRITICAL] CVE-2022-37434: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-37434 Component: Wi-Fi Impact: An app may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved state management.

CVE-2023-38604 [CRITICAL] CVE-2023-38604: macOS Ventura 13.5 Apple Security Update: About the security content of macOS Ventura 13.5 Product: macOS Ventura Version: 13.5 CVE: CVE-2023-38604 Component: Kernel Impact: An app may be able to execute arbitrary code with kernel privileges Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2022-32221 [CRITICAL] CVE-2022-32221: macOS Ventura 13.2 Apple Security Update: About the security content of macOS Ventura 13.2 Product: macOS Ventura Version: 13.2 CVE: CVE-2022-32221 Component: CVE-2022-32221

CVE-2022-43551 [HIGH] CVE-2022-43551: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2022-43551 Component: CVE-2022-43551

CVE-2022-42842 [CRITICAL] CVE-2022-42842: macOS Ventura 13.1 Apple Security Update: About the security content of macOS Ventura 13.1 Product: macOS Ventura Version: 13.1 CVE: CVE-2022-42842 Component: Kernel Impact: A remote user may be able to cause kernel code execution Description: The issue was addressed with improved memory handling.

CVE-2022-42808 [CRITICAL] CVE-2022-42808: macOS Ventura 13 Apple Security Update: About the security content of macOS Ventura 13 Product: macOS Ventura Version: 13 CVE: CVE-2022-42808 Component: Kernel Impact: A remote user may be able to cause kernel code execution Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2023-32412 [CRITICAL] CVE-2023-32412: macOS Ventura 13.4 Apple Security Update: About the security content of macOS Ventura 13.4 Product: macOS Ventura Version: 13.4 CVE: CVE-2023-32412 Component: Telephony Impact: A remote attacker may be able to cause unexpected app termination or arbitrary code execution Description: A use-after-free issue was addressed with improved memory management.