CVE-2023-41232

EPSS 0.3%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

26 set 2023Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.7, iOS 17 and iPadOS 17, macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. An app may be able to disclose kernel memory.

Produtos afetados

Apple · iOS and iPadOS Apple · macOS

Referências

http://seclists.org/fulldisclosure/2023/Oct/4 http://seclists.org/fulldisclosure/2023/Oct/5 http://seclists.org/fulldisclosure/2023/Oct/6 https://support.apple.com/en-us/HT213927 https://support.apple.com/en-us/HT213931 https://support.apple.com/en-us/HT213932 https://support.apple.com/en-us/HT213938 https://support.apple.com/kb/HT213927 https://support.apple.com/kb/HT213931 https://support.apple.com/kb/HT213932 https://support.apple.com/kb/HT213938