CVEvulnerability
CVE-2023-23530
8.6 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-02-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.6 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 8.6 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Description
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.
Affected configurations
• apple ipados (< 16.3)
• apple iphone os (< 16.3)
• apple macos (< 13.2)
References
- https://support.apple.com/en-us/HT213605 Vendor Advisory
- https://support.apple.com/en-us/HT213606 Vendor Advisory
- https://support.apple.com/en-us/HT213605 Vendor Advisory
- https://support.apple.com/en-us/HT213606 Vendor Advisory