Threats affecting pkg:rpm/apple/macos

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to access user-sensitive data.

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to modify protected parts of the file system.

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to modify protected parts of the file system.

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.3, macOS Sonoma 14.1, macOS Monterey 12.7.2. An attacker may be able to access connected network volumes mounted in the home directory.

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.6.4, macOS Sonoma 14.2. An app may be able to read arbitrary files.

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing a file may lead to arbitrary code execution.

CVE-2023-42891 is a vulnerability in Apple macOS that allowed an app to monitor keystrokes without obtaining user permission. The issue was due to an authentication problem related to state management. Apple fixed this vulnerability in macOS Sonoma 14.2, macOS Ventura 13.6.3, and macOS Monterey 12.7.2.

CVE-2023-42901 is a vulnerability in macOS where processing a maliciously crafted file can cause unexpected application termination or arbitrary code execution. The issue stems from multiple memory corruption flaws that have been addressed through improved input validation. Apple fixed this vulnerability in macOS Sonoma version 14.2.

A vulnerability in Apple macOS allows an app to potentially access user-sensitive data. This issue was addressed by Apple with improved checks and is fixed in macOS Sonoma 14.2. Versions prior to 14.2 are affected.

CVE-2023-42886 is a vulnerability in Apple macOS where an out-of-bounds read could allow a user to cause unexpected application termination or potentially execute arbitrary code. The issue has been addressed with improved bounds checking and is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3, and macOS Monterey 12.7.2.

Multiple memory corruption vulnerabilities in macOS were addressed by improved input validation. Processing a maliciously crafted file could cause unexpected application termination or allow arbitrary code execution. These issues are fixed in macOS Sonoma 14.2.

Multiple memory corruption vulnerabilities in macOS could allow processing of maliciously crafted files to cause unexpected application termination or arbitrary code execution. These issues are resolved in macOS Sonoma 14.2.

Multiple memory corruption vulnerabilities in macOS were addressed with improved input validation. Processing a maliciously crafted file could cause unexpected application termination or allow arbitrary code execution. These issues are fixed in macOS Sonoma 14.2.

Multiple memory corruption vulnerabilities in macOS could allow processing of maliciously crafted files to cause unexpected application termination or arbitrary code execution. These issues are addressed in macOS Sonoma 14.2.

Multiple memory corruption vulnerabilities in macOS could allow processing of maliciously crafted files to cause unexpected application termination or arbitrary code execution. These issues are addressed with improved input validation and fixed in macOS Sonoma 14.2.

Multiple memory corruption vulnerabilities in macOS could allow processing a maliciously crafted file to cause unexpected application termination or arbitrary code execution. These issues are resolved in macOS Sonoma 14.2.

A logic issue in Apple macOS could allow an app to access sensitive user data. This vulnerability is addressed by improved checks and is fixed in macOS Sonoma 14.2 and macOS Ventura 13.6.3.

Multiple memory corruption vulnerabilities in macOS could allow processing of maliciously crafted files to cause unexpected application termination or arbitrary code execution. These issues have been addressed with improved input validation and fixed in macOS Sonoma 14.2.

CVE-2023-40402 is a permissions issue in Apple macOS that could allow an app to access sensitive user data. This vulnerability was addressed with additional restrictions and fixed in macOS Sonoma 14.

A privacy issue in Apple macOS allows an app to potentially access calendar data saved to a temporary directory. This vulnerability is addressed by improved handling of temporary files and is fixed in macOS Sonoma 14.