CVE-2023-41064
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura 13.5.2, iOS 15.7.9 and iPadOS 15.7.9, macOS Big Sur 11.7.10. Processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Known exploited
CVSS Score
7.8
EPSS Score
0.926
Published
2023-09-07
A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score
7.0
EPSS Score
0.001
Published
2023-09-06
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. A remote attacker may be able to cause arbitrary javascript code execution.
CVSS Score
9.8
EPSS Score
0.012
Published
2023-09-06
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.
CVSS Score
7.8
EPSS Score
0.0
Published
2023-09-05
Use After Free in GitHub repository vim/vim prior to 9.0.1857.
CVSS Score
7.8
EPSS Score
0.0
Published
2023-09-04
Use After Free in GitHub repository vim/vim prior to 9.0.1858.
CVSS Score
7.8
EPSS Score
0.0
Published
2023-09-04
Use After Free in GitHub repository vim/vim prior to 9.0.1840.
CVSS Score
7.3
EPSS Score
0.0
Published
2023-09-04
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.
CVSS Score
7.8
EPSS Score
0.0
Published
2023-09-02
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to cause a denial-of-service to Endpoint Security clients.
CVSS Score
5.5
EPSS Score
0.0
Published
2023-08-14
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13. A shortcut may be able to view the hidden photos album without authentication.
CVSS Score
3.3
EPSS Score
0.001
Published
2023-08-14