PT-2023-8415 · Apple · Apple Macos+2

0Xjprx + 1 · Publicado 2023-09-26 · Atualizado 2024-01-17 · CVE-2023-41060

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14 iOS versions prior to 17 iPadOS versions prior to 17

Description A type confusion issue in the kernel of macOS, iOS, and iPadOS allows a remote user to execute arbitrary code. This issue is related to an error in type conversion. The estimated number of potentially affected devices is not specified.

Recommendations For macOS versions prior to Sonoma 14, update to macOS Sonoma 14 or later. For iOS versions prior to 17, update to iOS 17 or later. For iPadOS versions prior to 17, update to iPadOS 17 or later.

Correção

Type Confusion

Enumeração de Fraquezas

CWE-843

Identificadores relacionados

BDU:2024-00688

CVE-2023-41060

Produtos afetados

Apple Macos

Ios

Ipados

Referências · 13

• https://twitter.com/onejailbreak_/status/1738661459570086011 · Publicação no Twitter
• https://support.apple.com/en-us/HT213940 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1745211717381243300 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2024-00688 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2023-41060 · Nota de Segurança
• https://twitter.com/onejailbreak_/status/1738697544543150400 · Publicação no Twitter
• https://support.apple.com/kb/HT213940 · Nota
• https://twitter.com/anner_games1/status/1738700730511335665 · Publicação no Twitter
• https://support.apple.com/en-us/HT213938 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-41060 · Aviso do Fabricante
• https://twitter.com/ichitaso_bot/status/1738672339565654073 · Publicação no Twitter
• https://t.me/cvenotify/67642 · Publicação no Telegram
• https://support.apple.com/kb/HT213938 · Nota