PT-2023-8415 · Apple · Apple Macos+2

0Xjprx + 1 · Published 2023-09-26 · Updated 2024-01-17 · CVE-2023-41060

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14 iOS versions prior to 17 iPadOS versions prior to 17

Description A type confusion issue in the kernel of macOS, iOS, and iPadOS allows a remote user to execute arbitrary code. This issue is related to an error in type conversion. The estimated number of potentially affected devices is not specified.

Recommendations For macOS versions prior to Sonoma 14, update to macOS Sonoma 14 or later. For iOS versions prior to 17, update to iOS 17 or later. For iPadOS versions prior to 17, update to iPadOS 17 or later.

Fix

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

BDU:2024-00688

CVE-2023-41060

Affected Products

Apple Macos

Ios

Ipados

References · 13

• https://support.apple.com/en-us/HT213940 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-00688 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-41060 · Security Note
• https://support.apple.com/en-us/HT213938 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-41060 · Vendor Advisory
• https://twitter.com/onejailbreak_/status/1738661459570086011 · Twitter Post
• https://twitter.com/CVEnew/status/1745211717381243300 · Twitter Post
• https://twitter.com/onejailbreak_/status/1738697544543150400 · Twitter Post
• https://support.apple.com/kb/HT213940 · Note
• https://twitter.com/anner_games1/status/1738700730511335665 · Twitter Post
• https://twitter.com/ichitaso_bot/status/1738672339565654073 · Twitter Post
• https://t.me/cvenotify/67642 · Telegram Post
• https://support.apple.com/kb/HT213938 · Note