Lucene search

[email protected]NVD:CVE-2023-32412

HistoryJun 23, 2023 - 6:15 p.m.

CVE-2023-32412

2023-06-2318:15:13

CWE-416

[email protected]

web.nvd.nist.gov

watchos

tvos

macos ventura

ios

ipados

macos big sur

macos monterey

remote attacker

app termination

arbitrary code execution

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.02 Low

EPSS

Percentile

89.1%

JSON

A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. A remote attacker may be able to cause unexpected app termination or arbitrary code execution.

Affected configurations

NVD

Node

appleipadosRange<15.7.6

appleipadosRange16.0–16.5

appleiphone_osRange<15.7.6

appleiphone_osRange16.0–16.5

applemacosRange11.0–11.7.7

applemacosRange12.0–12.6.6

applemacosRange13.0–13.4

appletvosRange<16.5

applewatchosRange<9.5

References

support.apple.com/en-us/HT213757

support.apple.com/en-us/HT213758

support.apple.com/en-us/HT213759

support.apple.com/en-us/HT213760

support.apple.com/en-us/HT213761

support.apple.com/en-us/HT213764

support.apple.com/en-us/HT213765

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.02 Low

EPSS

Percentile

89.1%

JSON

Related for NVD:CVE-2023-32412

cve1 cvelist1 prion1 apple7 nessus3 openvas3