CVEvulnerability
CVE-2023-23540
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-05-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.4, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5. An app may be able to execute arbitrary code with kernel privileges.
Affected configurations
• apple ipados (< 15.7.8)
• apple ipados (>= 16.0 < 16.4)
• apple iphone os (< 15.7.8)
• apple iphone os (>= 16.0 < 16.4)
• apple macos (< 11.7.5)
• apple macos (>= 12.0 < 12.6.4)
References
- https://support.apple.com/en-us/HT213675 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213676 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213677 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213842 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213675 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213676 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213677 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213842 Release Notes, Vendor Advisory