CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2023-386065.5/MEDIUMEPSS 2.9%CISA KEV
2023-07-27

Apple iOS, iPadOS, and macOS Kernel State Modification Vulnerability (CVE-2023-38606) Technical Advisory

[Affected Scope] Apple iOS and iPadOS prior to 15.7.8 / 16.6, macOS Big Sur prior to 11.7.9, macOS Monterey prior to 12.6.8, macOS Ventura prior to 13.5, tvOS prior to 16.6, and watchOS prior to 9.6

[Impact] A local application can bypass kernel memory protections and modify sensitive kernel states, leading to complete system compromise and arbitrary code execution

[Mitigation] Immediately apply the official security updates provided by Apple (iOS 15.7.8 / 16.6, macOS 13.5, etc.) and enforce updates via MDM

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse