CVE-2023-41984

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges.
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
appleipados
𝑥
< 16.7
appleiphone_os
𝑥
< 16.7
applemacos
12.0.0 ≤
𝑥
< 12.7
applemacos
13.0 ≤
𝑥
< 13.6
appletvos
𝑥
< 17.0
applewatchos
𝑥
< 10.0
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
appleios_and_ipados
𝑥
< 16.7
ADP
appleios_and_ipados
𝑥
< 17
ADP
applemacos
𝑥
< 12.7
ADP
applemacos
𝑥
< 13.6
ADP
applemacos
𝑥
< 14
ADP
appletvos
𝑥
< 17
ADP
applewatchos
𝑥
< 10
ADP