Apple Macos Ventura vulnerabilities

CVE-2023-32362 [MEDIUM] CVE-2023-32362: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-32362 Component: Quick Look Impact: A website may be able to track sensitive user information Description: Error handling was changed to not reveal sensitive information.

CVE-2023-23533 [MEDIUM] CVE-2023-23533: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-23533 Component: Sandbox Impact: An app may be able to modify protected parts of the file system Description: A logic issue was addressed with improved checks.

CVE-2023-27952 [MEDIUM] CVE-2023-27952: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-27952 Component: Safari Impact: An app may bypass Gatekeeper checks Description: A race condition was addressed with improved locking.

CVE-2023-28197 [LOW] CVE-2023-28197: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-28197 Component: Messages Impact: An app may be able to access user-sensitive data Description: An access issue was addressed with additional sandbox restrictions.

CVE-2023-28195 [LOW] CVE-2023-28195: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-28195 Component: Find My Impact: An app may be able to read sensitive location information Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2023-40383 [LOW] CVE-2023-40383: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-40383 Component: LaunchServices Impact: An app may be able to gain root privileges Description: This issue was addressed with improved checks.

CVE-2023-23523 [LOW] CVE-2023-23523: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-23523 Component: Photos Impact: Photos belonging to the Hidden Photos Album could be viewed without authentication through Visual Lookup Description: A logic issue was addressed with improved restrictions.

CVE-2023-42830 [LOW] CVE-2023-42830: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-42830 Component: App Store Impact: An app may be able to read sensitive location information Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2023-23543 [LOW] CVE-2023-23543: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-23543 Component: Camera Impact: A sandboxed app may be able to determine which app is currently using the camera Description: The issue was addressed with additional restrictions on the observability of app states.

CVE-2023-27928 [LOW] CVE-2023-27928: macOS Ventura 13.3 Apple Security Update: About the security content of macOS Ventura 13.3 Product: macOS Ventura Version: 13.3 CVE: CVE-2023-27928 Component: Identity Services Impact: An app may be able to access information about a user’s contacts Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2023-23524 [HIGH] CVE-2023-23524: macOS Ventura 13.2.1 Apple Security Update: About the security content of macOS Ventura 13.2.1 Product: macOS Ventura Version: 13.2.1 CVE: CVE-2023-23524 Component: Security Impact: Processing a maliciously crafted certificate may lead to a denial-of-service Description: A denial-of-service issue was addressed with improved input validation.

CVE-2023-23529 [HIGH] CVE-2023-23529: macOS Ventura 13.2.1 Apple Security Update: About the security content of macOS Ventura 13.2.1 Product: macOS Ventura Version: 13.2.1 CVE: CVE-2023-23529 Component: WebKit Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: A type confusion issue was addressed with improved checks.

CVE-2023-23514 [HIGH] CVE-2023-23514: macOS Ventura 13.2.1 Apple Security Update: About the security content of macOS Ventura 13.2.1 Product: macOS Ventura Version: 13.2.1 CVE: CVE-2023-23514 Component: Kernel Impact: An app may be able to execute arbitrary code with kernel privileges. Description: A use after free issue was addressed with improved memory management.

CVE-2023-23522 [MEDIUM] CVE-2023-23522: macOS Ventura 13.2.1 Apple Security Update: About the security content of macOS Ventura 13.2.1 Product: macOS Ventura Version: 13.2.1 CVE: CVE-2023-23522 Component: Shortcuts Impact: An app may be able to observe unprotected user data. Description: A privacy issue was addressed with improved handling of temporary files.

CVE-2022-32221 [CRITICAL] CVE-2022-32221: macOS Ventura 13.2 Apple Security Update: About the security content of macOS Ventura 13.2 Product: macOS Ventura Version: 13.2 CVE: CVE-2022-32221 Component: CVE-2022-32221

CVE-2023-23507 [HIGH] CVE-2023-23507: macOS Ventura 13.2 Apple Security Update: About the security content of macOS Ventura 13.2 Product: macOS Ventura Version: 13.2 CVE: CVE-2023-23507 Component: Intel Graphics Driver Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved bounds checks.

CVE-2023-23519 [HIGH] CVE-2023-23519: macOS Ventura 13.2 Apple Security Update: About the security content of macOS Ventura 13.2 Product: macOS Ventura Version: 13.2 CVE: CVE-2023-23519 Component: ImageIO Impact: Processing an image may lead to a denial-of-service Description: A memory corruption issue was addressed with improved state management.

CVE-2022-42915 [HIGH] CVE-2022-42915: macOS Ventura 13.2 Apple Security Update: About the security content of macOS Ventura 13.2 Product: macOS Ventura Version: 13.2 CVE: CVE-2022-42915 Component: CVE-2022-42915

CVE-2022-42916 [HIGH] CVE-2022-42916: macOS Ventura 13.2 Apple Security Update: About the security content of macOS Ventura 13.2 Product: macOS Ventura Version: 13.2 CVE: CVE-2022-42916 Component: CVE-2022-42916

CVE-2023-23530 [HIGH] CVE-2023-23530: macOS Ventura 13.2 Apple Security Update: About the security content of macOS Ventura 13.2 Product: macOS Ventura Version: 13.2 CVE: CVE-2023-23530 Component: Foundation Impact: An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges Description: The issue was addressed with improved memory handling.